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SECTION  I 


DIRECT  DRIVE  FBW  DEVELOPMENT 


1.0  INTRODUCTION 

The  use  of  electronic  primary  flight  control  (FBW) 
for  aircraft  has  brought  with  it  the  advantages  of  precise 
control  and  flexibility  associated  with  electronic  tech- 
nology. However,  the  requirement  for  preservation  of  con- 
trol with  component  failures  has  led  to  the  use  of  parallel 
redundancy  levels  which  are  considerably  greater  than  the 
conventional  hydromechanical  controls.  Present  FBW  mechani- 
zations for  primary  flight  controls  use  up  to  four  parallel 
channels  of  signal  transmission  in  addition  to  three  to 
four  electrohydraulic  channels  in  converting  electronic 
commands  to  a hydromechanical  output.  The  majority  of  the 
systems  developed  to  date  incorporate  the  parallel  redundancy 
for  the  electrohydraulics  in  a secondary  actuator,  since  the 
size  and  power  requirements  of  the  power  actuator  (primary 
actuator)  makes  incorporating  4 channel  parallel  redundancy 
at  that  level  impractical. 

Reducing  the  redundancy  level  of  a FBW  system  to  the  two 
parallel  channel,  single  fail-operate  level  of  conventional 
controls  while  meeting  aircraft  reliability  requirements 
is  practical  with  state-of-the-art  technology.  If  the  number 
of  components  of  the  FBW  system  can  be  reduced  and  those  re- 
tained developed  for  maximum  reliability,  the  reliability 
requirements  for  a single  fail-operate  FBW  mechanization  can 
be  met.  One  approach  to  this  type  of  mechanization  is  the 
direct  drive  FBW  system  designed  and  developed  by  Dynamic 
Controls,  Inc. 

A direct  drive  valve  is  used  to  accomplish  the  simplifi- 
cation of  the  FBW  system  for  a single  fail-operate  mechaniza- 
tion. For  this  type  of  valve,  no  hydraulic  amplification  stage 
is  used.  The  electromechanical  force  generator  is  connected 
directly  to  the  spool  valve  controlling  the  hydraulic  flow 
to  the  power  actuator.  This  type  of  mechanization  eliminates 
the  secondary  actuator  from  a FBW  mechanization.  This  type  of 
valve  configuration  has  also  been  investigated  by  North  Ameri- 
can Rockwell,  Columbus  Division  (under  Navy  Contract  N62269- 
72-C-0108)  and  General  Electric,  Johnson  City  (under  Air  Force 
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Contract  F33615-76-C-3037) . The  design  objectives  in  terms 
of  input  power  and  force  output  have  been  similar  for  all 
three  developments.  The  type  of  force  generator  selected 
for  development  by  each  company  has  been  different.  North 
American  Rockwell  investigated  a torque  motor  configuration. 
General  Electric  is  developing  a "linear  motion  bi-direction- 
al force  motor".  The  configuration  developed  by  Dynamic 
Controls,  Inc.  is  a moving  coil  force  motor.  Although  the 
direct  drive  valve  is  a key  element  to  the  control  system 
approach,  the  other  elements  of  the  control  system  are 
equally  important  to  the  success  of  the  FBW  mechanization. 


2.0  SYSTEM  DESCRIPTION 

2.1  General 

The  performance  characteristics  of  any  redundant  con- 
trol system,  hydromechanical  or  FBW,  are  defined  by  the 
following: 

1.  Nominal  Performance 

2.  Failure  Modes 

3.  Reliability 

4.  Performance  in  Failure  Modes 

5.  Failure  Removal 

All  of  these  characteristics  except  reliability  can  be  es- 
tablished during  a development  program  with  simple  tests. 

The  long  term  reliability  can  only  be  established  by  ex- 
tensive testing  or  "in  service"  use.  The  intent  of  the 
direct  drive  FBW  system  design  was  to  meet  or  exceed  the 
general  performance  requirements  for  a dual  hydromechanical 
flight  control  system. 

The  design  objectives  for  the  system  are  the  following: 

1.  The  system  shall  operate  with  two  separate 
hydraulic  systems  while  maintaining  hydraulic 
system  isolation. 

2.  The  system  shall  have  a minimum  frequency 
response  capability  of  5 Hz  @ -3Db  amplitude 
ratio  with  no  more  than  90°  phase  shift  at 
that  frequency. 
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3. 


The  system  threshold  and  hysteresis  charac- 
teristics shall  be  consistent  with  conven- 
tional servovalve  controlled  single  channel 
actuator  systems. 

4.  The  valve  direct  drive  shall  have  a minimum 
force  capability  of  80  lb.  for  the  power 
spool  of  the  actuator  at  the  spool  null. 

5.  The  system  shall  fail  operational  for  any 
probable  failure  of  a single  component  or 
input  (power  or  control)  to  the  system.  All 
failures  shall  be  detectable  during  preflight 
checkout . 

6.  The  performance  degradation  of  the  system 
between  the  operate  and  fail  operate  modes 
shall  be  acceptable  in  terms  of  typical 
aircraft  control  requirements. 

7.  System  output  deviations  during  failure 
removal  shall  be  of  low  amplitude  and 
short  duration  consistent  with  aircraft 
control  requirements. 

8.  Components  incorporated  in  the  system  shall 
be  operated  conservatively  and  be  of  state 
of  the  art  quality  in  terms  of  reliability. 

Design  objectives  6 and  7 are  general,  since  the  required 
characteristics  vary  from  aircraft  to  aircraft  and  control 
axis  to  control  axis.  However,  the  general  objective  is 
to  prevent  any  significant  change  from  the  normal  opera- 
tional mode  of  the  control  system  output  both  during  the 
failure  removal  action  and  while  in  the  fail  operate  mode. 
Design  objective  4 specifying  the  minimum  driving  force 
for  the  valve  drivers  is  based  on  the  force  determined  by 
North  American  Rockwell  as  adequate  for  overcoming  silting 
and  particle  contamination.  This  figure  was  used  by  North 
American  Rockwell  and  General  Electric  in  their  direct  drive 
investigations . 

In  addition  to  the  preceding  requirements,  the  require- 
ment for  survivability  with  one  hit  by  a 12.7  mm  projectile 
was  used  in  the  packaging  of  the  direct  drive  system.  This 
requirement  primarily  dictated  the  dispersion  approach  used 
in  the  construction  of  the  system. 
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2.2  Specific 


Figure  1 shows  the  direct  drive  control  system  in 
block  diagram  form.  The  control  system  is  a fail-operate 
configuration  where  a first  failure  (hydraulic  or  electric) 
still  allows  the  control  system  to  operate  with  a satis- 
factory level  of  performance.  The  system  is  based  on  using 
two  self-monitored  control  channels  and  a two  section 
electrohydraulic  control  actuator.  The  control  actuator 
uses  two  high  force  capability  servo  valve  drivers  directly 
connected  to  a tandem  power  spool.  In  the  normal  operational 
mode,  both  self-monitored  control  channels  operate,  command- 
ing the  two  direct  drive  valve  drivers.  The  direct  drive 
valve  drivers  are  a moving  coil  design.  Either  control 
channel  with  its  moving  coil  driver  has  sufficient  force 
capability  to  drive  the  tandem  power  spool  to  maximum  stroke. 
Note  that  the  two  self-monitored  control  channels  are  com- 
pletely independent  and  are  brought  together  only  at  the 
tandem  power  spool.  This  was  done  to  eliminate  the  possi- 
bility of  common  mode  failures  in  the  electronics. 

For  the  FBW  mechanization  to  meet  the  "fail-operate" 
criteria,  hardover  failures  in  either  control  channel  must 
be  eliminated.  Hardover  failures  in  the  command  and  feed- 
back paths  of  each  control  channel  are  detected  and  removed. 
This  is  accomplished  using  monitor  feedback  and  command 
elements  and  comparing  the  outputs  of  the  control  channel 
with  the  monitor  elements.  For  example,  on  Figure  1,  command 
input  2 and  feedback  2 are  used  as  the  monitor  for  command 
input  1 and  feedback  1.  The  comparison  is  made  after  the 
summing  junction  at  the  control  loop  error  point.  Disagree- 
ment between  the  command  and  monitor  portions  of  each  control 
channel  cause  the  command  portion  to  be  disconnected  from 
control.  The  effect  of  hardover  failures  of  the  servo  ampli- 
fiers driving  the  force  motor  are  eliminated  by  using  two 
amplifiers  and  two  separate  coils  in  the  direct  drive  valve 
driver.  The  servo  amplifiers  are  cross-strapped  in  their 
feedback  paths  so  that  failures  of  one  amplifier-coil  section 
are  offset  by  the  output  of  the  other  section. 


For  the  system  shown  on  Figure  1 to  withstand  single 
electrical  or  hydraulic  failures,  four  independent  electrical 
supplies  and  two  hydraulic  supplies  are  required.  Typically, 
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FIGURE  I DIRECT  DRIVE  "FAIL-OPERATE"  CONTROL  SYSTEM 


storage  batteries  would  be  used  to  provide  separate  DC 
power  supplies  to  the  operational  electronics.  The  storage 
batteries  would  be  connected  to  aircraft  power  to  DC 
converters  and  would  provide  the  necessary  + voltage  for  the 
FBW  system  electronics.  In  the  event  of  an  aircraft  elec- 
trical power  failure,  the  storage  batteries  would  provide 
sufficient  flight  time  to  allow  safe  return  of  the  aircraft. 
Figure  2 shows  a schematic  example  of  this  type  of  elec- 
trical supply  including  the  charging  circuit. 

In  addition  to  the  components  shown  on  Figure  1 and 
for  the  purpose  of  preflight  checkout  and  inflight  display, 
a pilot's  control  system  monitor  module  is  required. 

During  flight,  notification  of  a channel  failure  for  each 
of  the  self-monitoring  control  channels  is  displayed  to 
the  pilot.  Upon  disagreement  between  the  monitor  and  the 
control  portions  of  each  control  channel,  a comparator 
both  disconnects  the  control  channel  from  the  servovalve 
driving  amplifiers  and  causes  a failure  warning  light  on 
the  monitor  to  illuminate.  Preflight  checkout  of  the  con- 
trol system  is  provided  by  using  the  monitor  module  to 
inject  test  signals  into  the  control  channels  to  check  the 
channel  comparators  and  servoamplifier  cross-strap  connection. 
The  servoamplif iers  are  connected  to  "LED"  display  lights  to 
indicate  current  polarity  and  level  so  that  a preflight 
inspection  can  verify  correct  operation. 

Figure  3 shows  the  FBW  system  fabricated  by  Dynamic 
Controls,  Inc.  for  evaluation  test.  The  actuator  with 
which  the  system  is  used  is  an  F-4E  aileron  actuator. 

The  electronic  modules  are  constructed  and  dispersed  on 
the  mounting  surface  so  that  they  allow  fail-operational 
capability  with  single  weapons  impact  damage.  The  design 
of  the  elec'rical  elements  and  the  routing  of  the  signal 
and  control  wires  are  such  that  no  open  or  short  of  the 
wires  in  a wiring  bundle  or  the  component  modules  can 
create  a hardover  of  one  control  channel.  From  a surviva- 
bility aspect,  since  the  electrical  control  channels  are 
fed  into  a common  actuator,  the  actuator  must  be  protected 
in  order  to  prevent  a single  hit  from  causing  a catastrophic 
failure. 


The  size  of  the  control  electronics  is  primarily 
determined  by  the  single  hit  survivability  requirements. 
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Each  control  channel  uses  only  10  operational  amplifiers 
for  its  entire  function,  including  the  self -monitoring 
and  failure  removal.  Without  a single  hit  survivability 
requirement,  the  size  of  the  electronics  could  be  reduced 
to  that  of  the  four  servo  amplifier  modules. 


2.3  Electronics  Description 


2.3.1  General 


All  the  electronics  used  in  the  direct  drive  FBW  system 
are  powered  by  four  + 15  volt  DC  supplies  (Ref.  Figure  2). 

All  the  modules  are  hermetically  sealed,  using  "0"  ring  seals 
on  the  covers  and  Bendix  hermetic  MS  connectors.  The  elec- 
tronics are  designed  for  Mil-E-5400  Class  I operation.  The 
servo  amplifiers  are  presently  provided  with  a 3°C/watt  heat 
sink.  For  aircraft  operation,  these  would  be  mounted  on  a 
thermally  condugtive  surface  to  give  a net  effective  thermal 
resistance  of  1 C/watt  in  order  to  meet  the  Class  I operating 
temperatures. 


2.3.2 


Specific 


2.3.2. 1 Command  Amplifier  and  Disconnect 


Figure  4 shows  the  internal  construction  of  a command 
channel  summing  amplifier.  Included  in  the  ampli^ieris 
the  reed  relay  used  Co  disconnect  the  command  signal  in  . 
response  to  the  comparator  detecting  a failure. 

Figure  5 shows  the  electronic  circuit  for  the  command 
amplifier  and  disconnect  module.  As  shown  on  the  schematic, 
this  module  contains  a single  operational  amplifier  and  a 
relay.  The  operational  amplifier  is  used  as  a summing  am- 
plifier to  add  the  conmand  and  feedback  signals  connected 
to  Ri  and  R2  respectively.  Three  inputs  to  the  summing 
amplifier  are  shown.  R3  is  used  to  connect  the  summing 
amplifier  to  an  alternate  control  signal  as  required.  The 
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value  of  R4  is  used  to  adjust  the  gain  of  the  summing  ampli- 
fier (and  at  the  same  time  the  control  channel  loop  gain) . 
Note  that  the  output  of  the  summing  amplifier  is  connected 
to  the  comparator  module  for  input  and  feedback  signal 
failure  detection.  The  output  of  the  summing  amplifier  is 
connected  through  R7  to  the  junction  of  Rg  and  R9.  For 
normal  operation,  the  relay  is  held  open,  allowing  the 
command  amplifier  to  drive  the  servo  amplifiers  for  the 
direct  drive  valve  drivers.  Upon  a failure,  the  discon- 
nect relay  grounds  the  junction  of  R7 , Rg  and  Rg,  pre- 
venting the  servo  amplifiers  from  being  driven  by  the 
command  amplifier.  Resistors  Rg  and  Rg  are  included  in 
the  circuit  to  provide  isolation  for  the  two  output  con- 
nections to  the  servo  amplifiers.  This  isolation  prevents 
a hardover  from  driving  both  servo  amplifiers  if  an  input 
line  to  one  is  shorted  to  a voltage  source.  Under  that 
condition,  the  input  isolation  allows  the  other  servo  ampli- 
fier of  the  pair  to  cancel  the  effect  of  the  hardover  through 
the  cross-strap  feedback  operation.  R7  is  a current  limit- 
ing resistor  to  prevent  shorting  of  the  operational  amplifier 
to  ground  when  the  disconnect  relay  operates.  Back-to-back 
zener  diodes  and  D2  are  used  to  establish  saturation 
voltages  for  the  summing  amplifier  output. 

Note  that  the  supply  voltages  for  the  command  ampli- 
fier and  disconnect  are  connected  to  power  supply  #1.  The 
monitor  amplifier  and  command  and  monitor  comparator  module 
of  the  channel  are  connected  to  a second  power  supply  in 
order  to  prevent  a common  mode  failure  condition. 


2. 3. 2. 2 Monitor  Amplifier 

Figure  6 shows  the  internal  construction  of  the.  monitor 
summing  amplifier.  Except  for  the  disconnect  relay  not 
being  included  in  the  module,  the  construction  is  identical 
to  the  command  amplifier  of  Figure  3.  Note  how  few  compon- 
ents are  packaged  in  the  module.  Figure  7 shows  the  elec- 
trical circuit  for  the  monitor  amplifier.  Note  that  the 
supply  voltage  for  the  module  is  connected  to  power  supply 
#2  and  that  the  output  of  the  module  goes  only  to  the  command 
and  monitor  comparator  module.  The  inputs  to  the  summing 
amplifier  are  connected  to  a set  of  command,  feedback, 
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auxiliary  signal  and  operational  test  inputs.  The  opera- 
tional test  input  is  used  to  inject  a voltage  into  the 
monitor  amplifier  to  check  operation  of  the  failure 
detection  logic. 


2. 3. 2.3  Command  and  Monitor  Comparator 


Figure  8 shows  the  internal  construction  of  the  command 
and  monitor  comparator.  This  module  incorporates  a differ- 
ential operational  amplifier,  2 comparator  operational 
amplifiers  and  a latching  operational  amplifier  for  driving 
the  disconnect  relay  and  failure  warning  relay.  Figure  9 
shows  the  command  and  monitor  comparator  circuit.  All  the 
electronics  are  powered  by  power  supply  #2.  The  output  of 
the  command  and  disconnect  module  is  connected  to  the 
differential  amplifier  through  R]_.  The  output  of  the  moni- 
tor amplifier  is  connected  to  the  differential  amplifier 
through  R3.  The  output  of  the  differential  amplifier  is 
connected  to  the  two  AD-351S  comparators.  Detection  thres- 
holds are  set  by  potentiometers  Rg  and  R^g.  These  poten- 
tiometers are  used  to  adjust  the  comparator  detection  levels 
for  the  evaluation  unit.  For  a specific  application,  Rg 
and  R^g  would  be  eliminated  and  a fixed  detection  level 
established  by  the  values  of  R7,  R9  and  R15,  R17.  The 
relay  driver  operates  as  a latch  when  driven  by  the  com- 
parator output.  The  time  delay  for  failure  detection  is 
determined  by  the  RC  filter  made  up  of  R^g  and  C]_.  Diode 
D^  across  R^g  is  used  to  discharge  when  the  comparator 
outputs  are  in  a "no  failure"  state.  This  prevents 
from  being  "pumped  up"  and  causing  a disconnect  by  noise 
triggering  the  omparator  circuits.  Latching  of  the  relay 
driver  is  accomplished  with  the  diode  D3.  Resetting  of 
the  logic  is  accomplished  using  the  input  into  the  feedback 
junction  of  F.21  and  D3.  Grounding  of  this  junction  elimi- 
nates the  latched  output  feedback  voltage,  allowing  the 
latching  operational  amplifier  to  return  to  normal  output. 
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2. 3. 2.4  Servo  Amplifiers 


The  direct  drive  servo  amplifiers  used  with  the  moving 
coil  valve  drivers  are  designed  to  drive  each  coil  with 
1.40  amperes  maximum.  Each  coil  has  a nominal  8 ohms  re- 
sistance so  that  the  nominal  power  output  to  the  valve 
drivers  is  16  watts  each  coil.  The  servo  amplifiers  use 
one  Burr  Brown  power  operational  amplifier  model  3572 
each.  The  model  3572  operational  amplifier  has  a FET  input 
and  is  capable  of  +2  amperes  continuous,  5 amperes  peak 
and  a power  output  of  60  watts.  The  operating  range  of 
the  operational  amplifier  is  from  -55°  to  125°  C case  temper- 
ature. Figure  10  shows  the  internal  construction  of  the 
servo  amplifier^.  The  components  covered  with  thermal 
compound  are  the  current  sensing  resistors  which  are  used 
to  establish  the  current  feedback  for  each  amplifier.  The 
model  3572  opt  rational  amplifiers  incorporate  an  internal 
thermal  shutoff  provision  which  operates  at  case  temper- 
atures above  150°C  and  prevents  thermal  runaway  and  de- 
struction of  the  amplifier.  As  shown  in  Figure  8,  the 
3572  amplifier  is  mounted  below  the  circuit  board  on  the 
inside  of  the  module  chassis.  Both  the  relays  and  opera- 
tional amplifier  shown  on  the  circuit  board  were  initially 
used  to  drive  the  LED  current  indicator  lights.  The  re- 
lays have  since  been  removed  and  indicator  lights  driven 
directly  from  the  output  current  of  the  operational  amplifier. 

Figure  11  shows  the  electrical  schematic  for  the 
servo  amplifier.  A shared  current  feedback  cross-strap 
between  servo  amplifiers  is  established  by  the  inter- 
connection of  the  junction  between  R9  and  Rio  on  each 
amplifier.  If  one  of  the  coils  (or  one  amplifier)  opens, 
the  other  servo  amplifier  continues  to  operate.  The  loss 
of  one  servo  amplifier  forces  the  remaining  servo  amplifier 
to  increase  its  gain  automatically.  A hardover  failure 
in  one  servo  amplifier  causes  the  other  servo  amplifier 
to  go  hardover  in  the  opposite  current  flow  direction. 

This  effectively  creates  a zero  output  condition  in  the 
valve  driver  for  that  channel.  If  the  cross-strap  opens, 
the  amplifiers  continue  to  function  with  no  apparent 
change.  A short  of  the  cross-strap  causes  the  gain  of  both 
amplifiers  to  increase  (by  a factor  of  7).  As  shown  on 
the  Figure  9 schematic,  the  3572  operational  amplifiers 
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are  connected  in  a current  amplifier  configuration,  with  R17 
and  R^g  establishing  the  feedback  voltage  proportional  to 
coil  current.  The  741  operational  amplifier  (connected 
through  R13  to  the  current  feedback  voltage)  is  used  to  drive 
the  LEDs  which  indicate  current  polarity  and  relative  ampli- 
tude. Diodes  D^  and  D2  (connected  in  series  with  the  output 
voltages  to  the  LEDs)  are  used  to  increase  the  peak  inverse 
voltage  tolerance  of  the  LEDs.  Diodes  D3  and  D4  are  used 
to  increase  the  gain  of  the  741  operational  amplifier  at 
a particular  input  voltage  level.  This  causes  the  LEDs 
to  turn  on  "hard"  once  the  input  voltage  proportional  to 
coil  current  has  reached  the  selected  level.  Each  servo 
amplifier  is  connected  to  a different  electrical  power 
supply,  corresponding  to  the  different  supplies  used  with 
the  particular  control  channel. 

An  additional  input  to  one  servo  amplifier  of  each 
control  channel  is  used  for  preflight  checkout.  This  input 
(through  R19)  ’ s connected  to  a test  voltage  to  establish 
a hardover  input  into  one  servo  amplifier.  The  test  voltage 
allows  checking  the  integrity  of  the  cross-strap  connection 
by  observing  the  current  direction  and  amplitudes  of  the 
monitoring  LEDs  for  the  amplifiers. 


2.3.2. 5 Control  System  Monitor 


Figure  12  shows  the  pilot's  control  system  monitor 
module.  The  module  is  constructed  with  the  electronics 
for  channel  1 and  2 physically  isolated.  On  the  top  of 
the  module  are  the  failure  warning  lights  which  are  con- 
trolled by  the  channel  comparators.  Immediately  below 
the  warning  lights  are  reset  toggle  switches  which  allow 
resetting  of  the  failure  disconnect  circuits  for  each 
channel  and  reconnection  of  the  command  to  the  servo 
amplifiers.  Below  the  reset  switches  and  shown  uncovered 
by  the  drop  down  door  are  the  LED  current  direction  and  am- 
plitude indicating  lights.  In  the  center  of  the  lights  are 
momentary  toggle  switches  which  are  used  to  inject  failures 
to  the  control  system  in  order  to  check  the  operation  of 
the  failure  detection  comparator  and  cross-strap  integrity 
during  preflight  checkout. 
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Figure  13  shows  the  schematic  for  the  electronics 
in  the  pilot's  control  system  monitor  module.  Two  circuits 
as  shown  on  Figure  13  are  used  in  the  monitor  module,  one 
for  each  of  the  control  channels.  The  failure  test  switch 
is  connected  to  the  same  supply  voltage  used  for  the  monitor 
and  comparator  modules.  Since  the  failure  test  voltages 
are  connected  to  modules  which  are  powered  by  the  same  power 
supply  as  the  test  voltage,  electrical  power  supply  separa- 
tion is  maintained  for  the  modules. 

Although  the  LEDs  mounted  in  the  pilot's  module  provide 
satisfactory  operation,  an  alternate  technique  for  current 
monitoring  display  is  attractive.  This  technique  is  to 
mount  the  LEDs  in  the  servo  amplifiers  across  the  coil 
driving  terminals.  The  light  outputs  of  the  LEDs  are  then 
coupled  to  the  pilot's  monitor  using  fiber  optic  cables. 

This  alternate  technique  provides  a greater  degree  of  elec- 
trical isolation  than  the  present  method.  Connector  hard- 
ware and  cabling,  although  presently  not  available  as  off- 
the-shelf  hardware,  has  been  developed  to  a degree  that  makes 
this  technique  quite  practical. 


2.4  Moving  Coil  Force  Motor  Description 


2.4.1  General 


.1 


Two  moving  coil  force  motors  are  used  with  the  direct 
drive  system,  one  mounted  on  each  end  of  the  control  valve. 
The  design  requirement  for  each  force  motor  was  that  it 
generate  40  pounds  of  force  at  valve  null.  For  the  valve 
designed  for  use  with  the  F-4E  aileron  actuator,  the  maxi- 
mum stroke  required  from  the  force  motor  was  +.014  inches. 
The  objective  for  input  power  to  the  force  motor  (for  the 
40  pound  force)  was  to  not  exceed  32  watts  each  force  motor, 
(16  watts  each  coil).  The  motor  as  designed  consists  of  the 
following  three  principal  parts: 

1.  Magnetic  Structure 

2.  Coil 

3.  Suspension 
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The  weight  of  each  force  motor  as  fabricated  is  5.32  pounds, 
This  weight  is  made  up  of  4.11  pounds  magnetic  struc- 
ture and  1.21  pounds  of  coil,  suspension  and  housing. 


2.4.2 


Specific 


2.4.2. 1 Magnetic  Struc ture 


The  magnetic  structure  used  for  each  force  motor  is 
based  on  a slug  design  and  consists  of  three  parts;  the 
cup,  pole  piece  and  permanent  magnet  disc.  Approximately 
9 cubic  inches  of  permanent  magnet  material  are  used  in 
each  magnetic  structure.  The  magnetic  material  selected 
for  the  drivers  is  samarium  cobalt.  This  material  was 
selected  on  the  basis  of  its  high  energy  product  (which 
is  approximately  three  times  that  of  Alnico  5) . Ingot 
iron  (which  is  very  low  in  carbon)  is  used  for  the  cup 
and  pole  piece. 


The  three  parts  of  the  magnetic  structure  are  bonded 
together  with  a high  strength  thermal  setting  epoxy  ad- 
hesive. Figure  14  shows  the  magnetic  structure  with  the 
coil  and  suspension  assembly.  In  designing  the  magnetic 
structure,  leakage  factors  and  reluctance  factors  were 
used  which  were  empirically  established  for  similar  de- 
sign magnetic  circuits  incorporating  Alnico  5 magnets. 

The  values  used  proved  to  be  conservative  when  the  actual 
flux  levels  in  the  gap  of  the  magnetic  structure  were 
measured.  The  lower  leakage  and  reluctance  factors  experi- 
enced are  directly  attributable  to  the  characteristics  of 
samarium  cobalt,  which  exhibits  lower  flux  leakage  and 
higher  permeability  than  Alnico  5. 


2.4. 2. 2 Coil 


The  coil  is  constructed  of  four  layers  of  #30  AWG 
wire  which  has  an  insulation  rated  for  392°F  operating 
temperature.  The  coil  diameter  is  approximately  2.75 
inches.  The  coil  is  self  supporting  and  does  not  use 
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a support  form.  The  wires  are  bonded  to  each  other 
with  a thermal  setting  epoxy  adhesive  which  is  rated  for 
operating  temperatures  of  300°F  without  any  strength 
degradation.  The  four  layers  are  divided  into  two  elec- 
trically and  physically  isolated  two  layer  coils  of  8 
ohms  resistance.  One  coil  is  used  for  each  servo  ampli- 
fier of  the  control  channel  connected  to  the  particular 
force  motor.  The  coil  is  attached  to  the  suspension 
mounting  ring  with  the  same  epoxy  adhesive  used  to  make 
the  coil.  The  coil  wires  are  soldered  to  terminal 
posts  mounted  in  the  suspension  mounting  ring.  Soft 
copper  braided  wire  is  used  to  connect  the  terminals  on 
the  mounting  ring  to  the  electrical  connectors  in  the 
suspension  housing. 


2.4. 2. 3 Suspension 


The  suspension  used  in  the  force  motor  couples  the 
coil  motion  to  the  valve  spool  and  provides  the  spring 
rate  for  centering  the  control  valve.  The  coil  sus- 
pension is  a folded  suspension  which  allows  maintaining 
the  overall  diameter  of  the  force  motor  within  the 
dimension  established  by  the  sizing  of  the  magnetic 
structure.  Figure  15  shows  an  exploded  view  of  the 
coil,  suspension  components  and  the  suspension  housing. 

The  principal  spring  rate  is  produced  in  the  center 
member  of  the  suspension  by  the  bending  force  and  moment 
applied  to  the  four  cantilever  sections  of  that  member. 

The  folded  suspension  also  provides  a force  multi- 
plication ratio.  The  ratio  is  easily  changed  by  varying 
the  distance  from  the  coil  axis  to  the  pivots  in  the 
mounting  ring  which  attaches  the  suspension  to  its  housing. 
The  pivots  used  in  the  suspension  are  flexure  pivots  manu- 
factured by  Bendix  (Electric  & Fluid  Power  Division).  Eigh 
flexure  pivots  are  used  in  each  suspension.  As  shown  in 
Figure  14,  a short  wire  is  used  to  couple  each  force  motor 
to  the  control  valve.  Since  the  wire  is  short,  the  wire 
diameter  required  to  prevent  buckling  is  small  and  the  wire 
has  a low  value  of  lateral  stiffness.  This  allows  axial 
misalignment  of  the  driver  and  valve  spool  without  side- 
loading the  spool  and  makes  the  driver  to  valve  alignment 


non-critical.  The  coupling  design  provides  for  adjusting 
the  position  of  the  control  valve  with  one  force  motor 
coupling  and  then  attaching  the  second  force  motor  without 
disturbing  the  initial  adjustment.  The  materials  used 
in  constructing  the  suspension  are  magnesium  for  the  coil 
mounting  ring,  aluminum  for  the  suspension  arms  and 
mounting  ring  and  spring  steel  for  the  center  member. 

2.4. 2.4  Characteristics 


As  used  in  an  electrohydraulic  control  system,  the 
force  motor  has  several  inherent  characteristics  which  are 
worth  noting.  The  coil  is  operated  in  oil  so  that  heat 
transfer  from  the  coil  is  excellent.  (A  coil  of  similar 
design  and  wire  size  has  been  operated  in  the  laboratory 
with  360  wagts  input  without  the  coil  exceeding  a tempera- 
ture of  200°F.)  The  cooling  of  the  coil  allows  increasing 
the  force  output  of  the  existing  force  motor  by  simply  in- 
creasing the  input  power.  Since  the  moving  coil  force  motor 
does  not  operate  by  inducing  a flux  change  in  a magnetic 
member,  there  is  no  magnetic  saturation  characteristic  of 
the  driver  to  limit  the  force  output  with  increasing  input 
power. 

Although  "wet"  magnetic  structures  can  act  as  magnetic 
particle  filters,  the  design  of  the  moving  coil  force  motor 
prevents  system  flow  from  passing  through  the  structure. 

The  housing  of  the  force  motors  are  oil  flooded  by  connect- 
ing the  housing  to  hydraulic  system  return.  A 2 micron 
absolute  filter  disc  is  inserted  in  the  connection  between 
the  housing  and  return  to  minimize  particles  entering  the 
housing.  The  oil  contained  within  the  housing  is  essenti- 
ally a non-circulating  volume  of  oil  and  therefore  does 
not  carry  in  magnetic  particles  to  the  magnetic  structure. 

2.5  Control  Valve  and  Actuator  Description 

To  demonstrate  operation  of  the  direct  drive  mechaniza- 
tion, the  system  was  applied  to  the  aileron  control  of  one 
wing  of  an  F-4E  aircraft.  The  control  actuator  used  in  the 
F-4E  aircraft  for  normal  aileron  control  is  a dual  tandem 
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moving  body  actuator  with  a mechanical  control  input.  For 
application  of  the  direct  drive  system,  a complete  valve 
and  driver  package  was  designed  to  replace  the  normal  manual 
input  control  valve.  The  normal  manual  control  valve  is 
a long  stroke  valve  with  multiple  hole  type  porting  for  flow 
force  compensation.  Since  with  the  FBW  mechanization,  flow 
forces  are  not  reflected  to  the  pilot,  flow  force  compensa- 
tion was  not  used  in  the  design  of  the  direct  drive  spool 
valve.  The  spool  valve  is  a conventional  tandem  spool  valve 
consisting  of  two  3 land,  4 way  valve  sections.  The  stroke 
of  the  valve  for  the  required  actuator  flow  is  +.014  inches. 
This  corresponds  to  a nominal  flow  of  14  GPM  from  each 
hydraulic  system  at  3000  psi  differential  pressure  across 
the  valve.  Isolation  of  the  two  hydraulic  systems  used 
with  the  actuator  is  accomplished  at  the  center  of  the 
spool  by  lap  fit  clearance  between  system  returns. 

Figure  16  shows  the  valve  and  driver  package  mounted 
on  the  F-4E  aileron  actuator.  The  hydraulic  connection 
ports  are  located  as  on  the  normal  manual  control  valve. 

As  shown  in  Figure  16,  four  position  transducers  are  mounted 
to  the  actuator  to  provide  the  necessary  electrical  position 
feedback  to  the  actuator.  The  feedback  signals  and  the 
control  valve  input  wiring  is  enclosed  in  tubing  for  protec- 
tion. A connector  box  is  attached  to  the  actuator  to  mount 
the  interface  electrical  connectors.  Four  connectors  are 
used,  corresponding  to  the  command  and  monitor  channels. 
Figure  17  shows  the  actuator  as  mounted  in  the  evaluation 
test  setup. 

The  direct  drive  configuration  mechanized  and  shown  in 
Figure  2 uses  DC  position  potentiometers  for  both  actuator 
feedback  position  sensing  and  control  stick  motion  sensing. 
The  reliability  of  these  potentiometers  for  control  motions 
should  be  satisfactory.  However,  if  necessary  from  a life 
standpoint,  LVDTs  could  be  used  by  incorporating  oscillators 
and  demodulators  into  each  of  the  control  channels.  This 
would  increase  slightly  the  cost  and  parts  count  for  the 
FBW  system.  No  increase  in  size  would  occur,  since  the 
summing  amplifier  modules  have  adequate  room  for  the 
components . 
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2.6  Preflight  Checkout  Procedure 


Preflight  checkout  of  the  FBW  system  is  accomplished 
with  the  control  system  monitor  module.  With  the  hydraulic 
supplies  off,  the  control  stick  is  moved  and  the  pairs  of 
LED  lights  indicating  current  polarity  and  amplitude  are 
observed.  If  the  lights  do  not  light  together  and  the  same 
polarity  lights  illuminate,  a problem  with  the  servoampli- 
fiers  is  indicated.  Checkout  of  the  comparator  and  the  dis- 
connect circuits  is  accomplished  by  injecting  a failure 
with  the  failure  inject  toggle  switches  and  observing  the 
failure  indicating  lights.  The  failure  indicating  lights 
for  each  channel  should  light  and  the  control  stick  should 
not  affect  the  current  indication  for  the  servoamplif iers . 
Checkout  of  the  crossstrap  operation  is  also  made  at  the 
same  time  with  the  failure  inject  toggle  switch  which  applies 
a hardover  input  into  one  servoamplif ier  of  a command  chan- 
nel. For  this  test  condition,  the  servoamplif ier  indicating 
lights  should  show  opposite  current  polarity  directions  for 
correct  crossstrap  operation.  After  the  preflight  check- 
out procedure  is  completed,  the  channel  failure  logic  is 
reset  and  the  drop  down  door  closed. 


3.0  EVALUATION  TESTS 


3.1  General 


The  evaluation  testing  of  the  direct  drive  FBW  '■ystem 
was  conducted  in  two  parts.  The  first  part  involvec  estab- 
lishing the  characteristics  of  the  direct  drive  force  motor. 
The  second  part  of  the  testing  involved  measuring  the  char- 
acteristics  of  the  direct  drive  FBW  system. 

Evaluation  of  the  direct  drive  moving  coil  force  motor 
included  measurement  of  the  suspension  stiffness,  the  output 
deflection  vs.  input  current  relationship  and  the  force  motor 
frequency  response. 
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Evaluation  of  the  direct  drive  FBW  system  included 
measuring  the  general  performance  characteristics  (both 
in  the  normal  and  fail-operate  conditions)  and  failure 
removal  transients.  Also  included  in  the  evaluation  was 
failure  mode  verification  testing  and  a verification  test 
for  the  crossstrap  operation.  For  the  system  evaluation, 
the  direct  drive  FBW  system  parameters  were  set  to  the 
following  values: 


1.  Nominal  loop  gain  each 
commar  channel 

2.  Failure  detection  level  as 
a % of  maximum  error 

as  a 7o  of  actuator  command 
input 

3.  Failure  detection  time  delay 

4.  Servo  amplifier  maximum 
current 

5.  Input  command  for  full 
actuator  stroke 


31.5  radians /sec. 

6. 3% 

. 977o 

10  millisecs. 

1.4  amperes 

+2.85  volts 
-2.3  volts 


The  loop  gain  was  set  at  31.5  radians/sec.  to  provide 
for  the  expected  507,  reduction  of  the  system  frequency 
response  when  one  control  channel  is  failed.  (The  normal 
F-4  aileron  actuator  has  a loop  gain  of  approximately 
14  radians/sec.)  The  failure  detection  was  set  to  6.37, 
of  maximum  error  voltage.  This  level  is  low  compared  to  the 
30  to  507,  generally  used  for  a FBW  system.  The  low  setting 
without  occurring  nuisance  disconnects  is  practical  with 
the  direct  drive  FBW  system  since  the  failure  logic  monitors 
only  2 voltages  (rather  than  comparing  3 or  more) . The 
monitored  voltages  (feedback  and  command  difference  voltages) 
do  not  have  dynamic  response  differences  and  are  well  matched 
statically  with  the  position  transducers  used  (.17,  full  scale) 

The  time  delay  in  the  disconnect  circuitry  was  set  at 
10  milliseconds.  This  is  shorter  than  the  100  milliseconds 
typically  used  for  a disconnect  delay  with  a force  sharing 
system.  The  short  time  delay  without  incurring  nuisance 
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disconnect  problems  is  practical  since  batteries  used  with 
the  aircraft  power  to  DC  converters  prevent  aircraft  power 
transients  from  affecting  the  electrical  power  for  the 
FBW  system. 

The  command  voltage  level  was  arbitrarily  set  at  the 
+2.85,  -2.3  volt  level  by  the  output  voltage  generated  by 
the  command  position  transducers  used  in  the  control  stick 
of  the  system.  Different  potentiometers,  supply  voltages 
or  motion  gearing  could  have  been  used  to  change  the  maximum 
position  command  voltage. 


3.2  Test  Procedure  - Force  Motor 


3.2.1 


Suspension  Stiffness 


To  measure  the  stiffness  characteristics  presented  to 
the  power  spool  by  the  folded  moving  coil  suspension,  a 
force  gauge  and  dial  indicator  were  used.  Each  suspension 
was  assembled  in  its  housing  and  clamped  to  a test  support. 
The  force  gauge  was  attached  to  the  suspension  output  coup- 
ling and  the  dial  indicator  positioned  to  read  the  deflection 
of  the  output  coupling.  The  deflection  as  a function  of 
force  was  recorded  for  both  directions  of  force  application 
up  to  a force  reading  of  40  pounds. 


3.2.2  Output  Deflection  vs.  Input  Current 


In  measuring  the  output  deflection  of  each  moving  coil 
force  motor,  a compieceiy  assembled  force  motor  was  aLLac’ueu 
to  a test  support.  A dial  indicator  was  positioned  to  read 
the  deflection  of  the  output  coupling.  Two  variable  DC 
power  supplies  were  used  to  drive  the  force  motor  coils. 

The  deflection  vs.  input  current  was  recorded  for  selected 
input  current  settings. 


3.2.3 


Frequency  Response 


To  measure  the  frequency  response  of  the  force  motor, 
the  motors  were  mounted  on  the  valve  body  and  connected  to 
the  control  valve.  Since  a coil  moving  in  a magnetic  field 
is  a velocity  transducer,  one  force  motor  was  used  to  drive 
the  control  valve  and  the  other  force  motor  was  used  to  meas- 
ure the  output  velocity  as  a function  of  input  frequency. 

A Bafco  Response  Analyzer  and  an  Esterline  Angus  xyy'  plot- 
ter were  used  to  generate  the  control  signal  and  record  the 
frequency  response.  The  frequency  response  obtained  was 
the  response  of  the  force  motors  and  control  valve  combina- 
tion and  is  easily  interpreted  in  terms  of  position  output 
frequency  response.  The  input  level  used  for  the  response 
measurements  was  .8  amperes  peak  through  each  coil. 


3.3  Test  Results  - Force  Motor 


Figure  18  shows  the  stiffness  characteristic  of  the 
force  motor  suspension.  Note  that  the  stiffness  increases 
with  increasing  deflection,  particularly  above  the  design 
deflection  of  .014  inches.  This  is  predictable  from  the 
design  equations  for  the  suspension  and  is  due  to  the  stiff- 
ness contribution  of  the  coil  coupling  to  the  suspension 
arms.  For  the  design  stroke  of  +.014  inches,  22  pounds 
of  force  is  required.  This  gives  a spring  rate  of  1571 
pounds/inch  around  the  .014  deflection  point.  Forty  pounds 
of  force  corresponds  to  a deflection  of  .0175  inches  and  is 
the  minimum  design  force  point  for  the  force  motor.  Figure 
19  shows  the  motion  linearity  and  hysteresis  for  one  valve 
driver  output  over  the  input  current  range  of  +1.5  amperes. 
Note  that  a deflection  of  .0175  inches  is  generated  by  1.0 
ampere  through  both  coils  of  the  force  motor.  Since  each 
coil  is  nominal  8 ohms  in  resistance,  the  power  required 
for  forty  pounds  output  force  is  8 watts  each  coil  or  16 
watts  each  driver.  This  power  requirement  is  lower  than 
that  expected  for  the  design.  The  reduction  in  power  from 
the  design  value  is  primarily  due  to  lovjer  flux  leakage 
in  the  magnetic  structure  than  predicted. 
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FIGURE  18  Force  Motor  Suspension  Stiffness  Characteristics 
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Over  the  stroke  range  of  +.014  inches,  the  hysteresis 
is  3.3%  or  less.  The  linearity  over  the  same  stroke  range 
is  +37..  These  figures  are  similar  to  those  obtained  from 
measurements  of  two  stage  electrohydraulic  servovalves. 

The  non-linearity  is  directly  attributable  to  the  suspen- 
sion stiffness  characteristics.  The  hysteresis  must  also 
be  attributed  to  the  suspension,  since  a moving  coil  force 
motor  has  no  inherent  electrical  hysteresis. 


Figure  20  shows  the  frequency  response  of  the  force 
motor  as  measured  with  the  control  valve  attached.  The  res- 
ponse is  a velocity  response  taken  by  using  one  moving  coil 
force  motor  as  a driver  and  the  other  as  a velocity  trans- 
ducer. A velocity  response  corresponding  to  a constant 
position  amplitude  response  exhibits  a 6QDb/octave  amplitude 
rise  with  increasing  frequency  and  a +90  phase  angle.  On 
Figure  20,  the  90°  phase  lag  frequency  (relative  to  the  1 
Hz  phase  angle)  occurs  at  60  Hz.  The  indicated  amplitude 
response  remains  flat  to  this  same  frequency  and  shows  no 
sign  of  peaking.  Since  the  force  motor  frequency  response 
is  more  than  10  times  higher  than  the  response  requirements 
for  the  F-4  aileron  actuator  and  well  damped,  the  force  motor 
dynamics  do  not  cause  a stability  problem  with  the  actuator 
control  loop. 


The  following  general  test  procedure  was  used  for  the 
measurements  of  the  direct  drive  system.  This  test  proce- 
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primary  flight  control  system  evaluation  and  has  been 
applied  to  other  system  mechanizations . The  test  proce- 
dure as  listed  defines  the  measured  parameter  and  states 
the  procedure  used  in  obtaining  the  measurement.  The 
procedure  is  divided  into  the  following  sections: 
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FIGURE  20  Force  Motor  Frequency  Response 


3.  Input  Deviation  Effect  Measurements 


4.  Failure  Removal  Transient  Measurements 


3.4. 2.1  Threshold 


"The  minimum  input  change  from 
zero  level  which  causes  a meas 
urable  output  change." 


Static  Threshold 


Apply  a slowly  increasing  + 
input  until  a measurable  output 
change  occurs.  Repeat  for  - 
input.  Threshold  is  indicated  by 
the  minimum  input  change  for  a 
measurable  output  change. 


"The  input  level  (at  a particu- 
lar frequency)  required  to  cause 
a measurable  output  level." 


Dynamic  Threshold 


A sinusoidal  input  at  a selected 
frequency  of  50%  of  the  band- 
pass of  the  actuator  is  applied 
to  the  actuator.  The  amplitude 
of  input  to  create  a measurable 
output  indicates  the  dynamic 
threshold.  The  bandpass  of 
actuator  is  defined  as  the 
frequency  at  which  -3db  amplitude 
or  90°  phase  shift  occurs  (which- 
ever is  lower  in  frequency) . 


"With  a sinusoidal  actuator  in 
put,  the  frequency  response  of 
the  actuator  is  the  curves  of 


Procedure 


the  amplitude  ratio  and  phase 
shift  as  a function  of  frequency." 

A sinusoidal  input  of  an  ampli- 
tude which  is 

a.  large  enough  to  minimize 
the  nonlinearity  distor- 
tions of  threshold  and 
hysteresis 

b.  small  enough  to  avoid 
velocity  saturation  in 
the  frequency  range  of 
interest 

is  applied  to  the  actuator  in- 
put. The  ratio  of  output  ampli- 
tude to  input  amplitude  and  out- 
put phase  relative  to  input  is 
recorded. 

The  curves  of  the  amplitude 
ratio  and  phase  indicate  the 
frequency  response. 


"The  amount  of  deviation  of  the 
the  actuator  output  from  the 
input  waveform." 

The  harmonic  distortion,  at 
the  input  level  used  to  meas- 
ure the  frequency  response,  is 
recorded  at  sinusoidal  inpuL 
frequencies  of  107„,  507,  and 
1007o  of  the  bandwidth. 


3.4. 2.4  Linearity 


Procedure 


3.4. 2. 5 Hysteresis 


Procedure 


"The  deviation  of  output  vs. 
input  from  a straight  line  re- 
lationship . " 

Apply  an  input  from  - max  to 
+ max  input  while  recording 
the  corresponding  output  posi- 
tion. Linearity  is  indicated 
by  max  deviation  of  the  plotted 
output  vs.  input  from  a straight 
line  drawn  between  zero  and  a 
point  which  minimizes  the  maxi- 
mum deviation  of  the  plotted 
curve  from  the  straight  line. 
Repeat  for  + input  to  - input. 


"The  non-coincidence  of  load- 
ing and  unloading  curves . " 

Apply  a slowly  varying  input 
to  the  actuator  at  10%  and  1% 
of  max  input  in  the  following 
sequence  while  recording  the 
actuator  output  position: 

0 to  + direction  input 

4-  <nnnt-  tr>  - Hlrprt'lnn  Inmil" 


- input  lu  4-  input 

From  the  plot  of  output  vs. 
input,  the  hysteresis  is  in- 
dicated by  the  difference  be- 
tween + direction  actuator  out- 
put position  and  - direction 
output  position  for  the  same 
input  level. 
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the  actuator  is  capable  of  mov- 
ing in  each  direction." 


Procedure  - With  the  actuator  at  zero  posi- 

tion, a maximum  amplitude  input 
is  applied  to  the  actuator  while 
the  actuator  motion  vs.  time  is 
recorded.  The  test  is  conducted 
for  both  directions  of  actuator 
motion.  The  slope  of  the  posi- 
tion vs.  time  record  indicates 
the  saturation  velocity. 

Transient  Response  - "The  time  response  of  the  ac- 
tuator output  to  an  applied 
step  input." 

Procedure  - Apply  a step  input  to  the  ac- 

tuator and  record  the  corres- 
ponding actuator  motion.  The 
amplitude  of  the  step  should 
be 

a.  large  enough  to  minimize 
the  nonlinearity  distortion 
of  threshold  and  hysteresis 

b.  small  enough  to  avoid  veloc- 
ity saturation. 

The  pint  nf  actuator  output 
motion  vs.  time  indicates  the 
transient  response. 


3.4.3  Failure  Effect  On  Performance 
3.4. 3.1  Faihire^JEffe^ 

"The  change  on  the  performance 
of  a redundant  actuator  due  to 
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input  failures  or  internal  fail- 
ures of  actuator  components." 

Procedure  - Inject  hydraulic  or  electrical 

input  failures  into  the  actuator 
under  test  to  cause  it  to  oper- 
ate in  its  "failure  operational" 
modes.  For  each  mode,  measure 
the  performance  by  repeating 
the  Performance  Measurement 
Tests.  The  input  levels  should 
be  maintained  at  those  used  for 
the  "no  failure"  performance 
tests  unless  the  performance 
changes  dictate  different  levels 
in  order  to  obtain  reasonable 
test  data. 


3.4.4  Input  Deviations  Effect 

3.4.4. 1 Electrical  Deviations 


"The  change  of  electronic  in- 
puts, both  power  and  control, 
with  respect  to  tne  normal 
values  and/or  each  other." 

Procedure  - Adjust  the  electrical  inputs 

one  at  a time  until  either  the 
maximum  expected  deviation  of 
the  input  is  reached  or  the 
failure  trip  level  is  reached. 
Section  3.4.2  will  be  measured 
with  each  electrical  input  de- 
viation adjusted  one  at  a time 
to  the  maximum  deviation  ex- 
pected or  a value  of  90%  of 
that  which  will  cause  a fail- 
ure trip. 
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3.4.4. 2 Hydraulic  Deviations 


Procedure 


"The  change  of  hydraulic  pres- 
sure inputs  with  respect  to 
the  normal  values." 

Adjust  the  hydraulic  inputs 
one  at  a time  until  the  maximum 
expected  deviation  or  a failure 
trip  level  is  reached.  The  per- 
formance parameters  of  Section 
3.4.2  will  be  measured  with  each 
hydraulic  input  adjusted  one  at 
a time  to  the  maximum  deviation 
expected  or  a deviation  value 
of  907o  of  that  which  will  cause 
a failure  trip. 


3.4.5  Failure  Removal  Transients 


3.4.5. 1 Electrical  Failure  Transients 


Procedure 


"The  change  in  actuator  out- 
put during  failure  corrective 
action  due  to  electronic  input 
failures  causing  transfer  from 
one  operational  mode  to  another." 

Apply  a slowly  changing  input 
into  one  control  channel  of 
the  actuator.  Record  the  actu- 
ator output  change  during  the 
corrective  action  of  actuator. 
Repeat  the  test  for  each  con- 
trol channel  input  and  failure 
mode  condition.  Repeat  for  a 
hardover  step  input. 


Apply  a sinusoidal  input  to 
all  channels.  Open  each  input 
while  recording  actuator  output, 
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3. 4. 5. 2 Hydraulic  Failure  Transients 


"The  change  in  actuator  out 
put  during  failure  removal 
corrective  action  due  to 
hydraulic  input  failures 
causing  transfer  from  one 
operational  mode  to  another 


Apply  a slowly  decreasing 
hydraulic  input  into  one 
control  channel  of  the  actua- 
tor output  change  during  the 
corrective  action  of  the  actua 
tor.  Repeat  the  test  for  all 
hydraulic  inputs. 


Repeat  the  preceding  test  with 
a rapid  decrease  of  hydraulic 
input  pressure. 


Test  Procedure  Application 


The  general  test  procedure  was  applied  to  the  direct 
drive  FBW  system  measurements  as  stated  with  the  following 
exceptions : 


The  electrical  deviation  tests  as  listed  in 
3.4.4. 1 were  not  performed.  This  is  because  pre- 
liminary testing  verified  that  the  failure  detec- 
tion level  allowed  only  input  deviations  which 
have  no  significant  effect  on  the  system  output. 

(A  command  input  deviation  of  90%  of  the  system 
detection  level  produces  only  a .44%  shift  of 
the  actuator  output  position.)  The  system  per- 
formance is  essentially  unchanged  from  the  normal 
operation  test  results,  in  terms  of  recorded  per- 
formance. System  performance  for  input  devia- 
tions allowed  with  a higher  detection  level  (say 
50%  of  error  current)  would  be  measurable,  although 
the  force  sharing  characteristics  of  the  mechanization 


would  have  the  effect  of  reducing  the  input 
deviation  effect  to  \ in  terms  of  the  system 
output  change. 


The  hydraulic  deviation  tests  listed  in  3.4.4. 2 
were  not  performed  since  the  mechanization  does 
not  detect  hydraulic  failures  (hydraulic  power  is 
not  used  in  the  direct  drive  spool  positioning). 

The  hydraulic  failure  transient  tests  listed  in 
3.4.5. 2 were  not  performed  since  the  unit  does 
not  transfer  control  as  a result  of  hydraulic 
failures . 


Figure  21  is  a block  diagram  schematic  of  the  instru 


mentation,  command  and  power  connections  used  during  the 
evaluation  of  the  direct  drive  FBW  system.  As  shown  on  the 
schematic,  a Bafco  servoanalvzer  was  used  with  an  Esterline 
Angus  XYY'  plotter  for  frequency  response  measurements. 

The  Hewlett  Packard  Model  333A  distortion  analyzer  was  used 
for  the  input  and  output  signal  distortion  measurements. 

The  Wavetec  Model  144  sweep  generator  and  the  XYY*  plotter 
were  used  for  the  hysteresis  and  linearity  measurements. 
Failure  removal  transients  were  recorded  on  the  Brush  200 
recorder.  The  100  V ac  60  Hz  power  connection  was  used  to 
power  +15  volt  dc  power  supplies.  As  shown  on  the  schematic, 
the  4 input  commands  were  run  through  a general  purpose 
switch  and  potentiometer  panel.  This  panel  allowed  indi- 
vidual variation  of  the  4 inputs  separately  and  the  injection 
of  hardover  input  commands.  Hydraulic  power  was  obtained 
from  the  30  GPM,  3000  psi  laboratory  pumping  system.  Supply 
pressure  for  each  actuator  half  was  connected  through  a 
pressure  shutoff  valve. 


3.4.7 


Test  Conditions 


The  following  three  test  conditions  for  the  operational 
moues  ojl  cue  system  were  useu  m uie  cvdiuanun. 


Condition  1 - Normal  operation  with  no  failures 


Condition  2 - Fail  operate  with  one  channel  failed 
electrically 
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Switch  and 


FIGURE  21  Test  Schematic 


Condition  3 - Fail  operate  with  one  hydraulic  supply 
failed 

In  presenting  the  test  results,  the  results  for  each  test 
condition  are  listed  for  the  performance  parameter  measured. 


3.5  Test  Results  - System  Performance 


3.5.1  Threshold 


Figures  22,  23  and  24  show  the  recorded  test  data  used 
to  establish  the  static  threshold  values  for  test  condi- 
tions 1,  2 and  3 respectively.  The  top  recorded  signal  is 
the  input  command  to  the  system.  ihe  input  is  a .01  Hz 
triangular  wave.  The  input  amplitude  is  increasing  slow- 
ly with  time.  The  threshold  value  is  indicated  by  the 
input  amplitude  at  which  the  actuator  moves  in  response  to 
the  input  signal.  The  input  amplitude  (peak  to  peak)  cor- 
responding to  the  start  of  the  actuator  movement  (in  com- 
parison to  the  5.05  volts  used  for  maximum  position  command 
of  the  actuator)  is  used  for  calculating  the  percent  thres- 
hold for  each  test  condition. 


The  static  threshold  in 
each  test  condition  is: 

Test  condition  1 

Test  condition  2 

Test  condition  3 


terms  of  input  command  for 

. 59 % 

- 1 . 3 1% 

. 08% 


The  increase  in  the  static  threshold  from  test  condition 
1 to  2 is  expected  since  the  force  applied  to  control  spool 

fnr  a rr-J  iron  -inmif-  1 owol  ir  t-Vi  a *-  nf  pnnH  T f”  ion  1 To  c f- 

condition  3 with  the  loss  of  one  hydraulic  supply  shows  the 
least  threshold.  This  indicates  that  some  friction  force 
on  the  spool  is  associated  with  the  pressurization  of  one 
section  of  the  control  spool.  The  measured  values  are 
somewhat  higher  than  desirable  for  small  signal  response 
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FIGURE  22  Static  Threshold  Results  - Condition  1 
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FIGURE  23  Static  Threshold  Results  - Condition  2 
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and  are  directly  related  to  the  characteristic  of  low  force 
gain  (in  comparison  to  a two  stage  servovalve  driving  the 
control  spool)  inherent  with  any  direct  drive  force  motor 
using  a spring  to  determine  position  with  force.  To  obtain 
lower  threshold  figures,  the  application  of  a low  amplitude 
dither  signal  could  be  used. 

Figures  25,  26  and  27  show  the  recorded  test  data  used 
to  establish  the  dynamic  threshold  values  for  test  conditions 
1,  2 and  3 respectively.  The  top  recorded  input  signal  is 
a 2.4  Hz  sinusoid.  The  amplitude  is  increasing  gradually 
with  time.  The  input  amplitude  at  which  the  actuator  starts 
to  follow  the  input  is  considered  to  be  the  dynamic  input 
threshold  level.  The  input  frequency  selected  for  this 
test  is  one  half  the  bandpass  frequency  of  the  system  in 
the  normal  operating  mode. 


The  dynamic  threshold  in  terms  of  the  input  command 
for  each  test  condition  is: 


Test  condition  1 


. 847o 


Test  condition  2 


1 . 66% 


Test  condition  3 - . 2870 

The  increase  in  the  dynamic  threshold  is  as  expected 
from  the  decreased  force  gain  of  condition  2 and  agrees 
with  the  static  threshold  results  in  terms  of  the  amount 
of  increase.  Again,  test  condition  3 has  the  lowest 
threshold  and  indicates  the  potential  for  lower  thresholds 
with  lower  levels  of  friction  for  the  control  spool.  The 
values  of  the  dynamic  threshold  agree  in  magnitude  with 
the  static  threshold  test  results.  A high  frequency  dither 


signal  could  be  used  to  decrease  the  measured  threshold 
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FIGURE  25  Dynamic  Threshold  - Condition  1 


mm 


DYNAMIC  CONTROLS,  INC. 
Test  Data 


TEST  ITEM  - Direct  Drive  Fly-By-Wire 


Date 

Prepared:  3/30/77 


TEST  - Dynamic  Threshold  - Condition  2 


Scale 


2 mv/div@2.4Hz 


.0009  in/div 


5 div/sec 


FIGURE  26  Dynamic  Threshold  - Condition  2 
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FIGURE  27  Dynamic  Threshold  - Condition  3 


Frequency  Response 


Figures  28,  29  and  30  show  the  frequency  response 
test  results  for  test  conditions  1,  2 and  3 respectively. 

For  the  test  condition  1,  the  -3Db  amplitude  point  and  45° 
phase  lag  frequency  both  appear  at  5 Hz.  This  indicates 
that  the  force  motor  dynamics  are  sufficiently  high 
response  that  they  do  not  enter  into  the  actuator  control 
loop  response  characteristics  and  the  control  actuator 
appears  as  a pure  first  order  lag  system.  For  test  condition 
2 as  shown  in  Figure  29,  the  -3Db  amplitude  point  and  45° 
phase  lag  frequency  appear  at  2 Hz.  This  reduction  of 
frequency  response  for  a loss  of  one  control  channel  is 
expected,  since  the  force  gain  and  therefore  the  position 
gain  of  the  control  valve  driver  is  reduced  to  % the  normal 
value.  This  causes  a resulting  reduction  in  the  control 
loop  gain  and  hence  the  frequency  response  of  the  actuator. 
Figure  30  shows  that  the  loss  of  one  hydraulic  supply  does 
not  affect  the  frequency  response  of  the  control  actuator. 


3.5.3 


Distortion 


In  measuring  the  harmonic  distortion  of  the  direct  drive 
system,  only  one  frequency  (1007,  of  the  bandpass)  was  used. 
This  was  a test  frequency  of  5 Hz  and  was  used  because  the 
distortion  analyzer  does  not  allow  measurement  below  that 
frequency.  The  distortion  figures  were  measured  with  an 
input  level  of  107,  of  the  maximum  command  voltage.  The 
harmonic  distortion  of  the  input,  output  and  the  net  con- 
tribution of  the  FEW  system  at  5 Hz  are  as  follows: 


Distortion 


Input 

Output 

Net 

Test 

Condition 

1 

1.3% 

6.2% 

4.9% 

Test 

Condition 

2 

1.3% 

8.8% 

7.5% 

Test 

Condition 

3 

1.3% 

5.2% 

3.9% 
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DEGREES  LAG 


FREQUENCE  IN  Hz 


The  harmonic  distortion  increases  slightly  with  test 
condition  2 and  decreases  with  test  condition  3 when  compar- 
ed to  the  normal  operating  condition  1.  Based  on  measure- 
ments of  other  electrohydraulic  control  systems,  the  harmonic 
distortion  of  the  direct  drive  system  is  quite  low  at  the 
5 Hz  frequency. 


Figures  31,  32  and  33  show  the  linearity  of  the  system 
output  over  the  full  range  of  command  input.  Note  that  the 
total  input  voltage  change  for  the  maximum  actuator  stroke 
is  5.05  volts.  The  individual  linearity  curves  were  run 
with  + to  - and  - to  + input  change.  This  allows  seeing 
the  hysteresis  in  terms  of  the  total  actuator  stroke  for 
each  test  condition.  The  apparent  linearity  for  all  three 
test  conditions  is  similar.  On  the  scale  of  the  Figures 
31,  32  and  33,  no  significant  hysteresis  or  difference  in 
hysteresis  or  linearity  between  test  conditions  is  apparent 


Figures  34,  35,  and  36  are  recordings  of  the  data  used 
to  calculate  the  hysteresis  of  the  FBW  system  for  test  con- 
ditions 1,  2 and  3 respectively.  For  these  figures,  an  input 
of  107o  of  the  maximum  command  input  was  used.  For  the  test 
conditions  used,  the  hysteresis  in  terms  of  the  10%  and  the 
1007.  input  is: 


Hysteresis 

Inches  7.  of  107.  7.  of  1007. 

Input  Input 


Test  Condition  1 


nns  b 


Test  Condition  3 


FIGURE  31  Linearity  - Condition 
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FIGURE  36  Hysteresis  - Condit 
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Figures  37,  38  and  39  show  the  hysteresis  measurement 
recordings  for  an  input  of  17,  of  the  maximum  command  input. 
For  the  test  conditions  used,  the  hysteresis  in  terms  of 
the  17,  and  the  1007,  input  is : 

Hysteresis 

Input  Input 


Inches 

7,  of  17, 

7.  of 

Test 

Condition 

1 

.008 

30.2 

.30 

Test 

Condition 

2 

.015 

54.7 

.55 

Test 

Condition 

3 

.0085 

32.1 

.33 

Note  that  the  general  magnitude  of  the  hysteresis  in  terms 
of  maximum  command  input  is  similar  for  both  the  107,  and  1% 
input.  This  hysteresis  is  associated  with  the  friction 
levels  of  the  suspension  and  spool  and  could  be  reduced 
(if  desired)  with  the  application  of  a small  amplitude  dither 
signal  to  the  system. 


3.5.6 


Time  Response 


Figure  40  illustrates  the  test  data  recorded  for  measur- 
ing the  extend  and  retract  maximum  rates  for  the  control 
actuator.  The  data  shown  is  for  test  condition  1 extend 
motion.  The  data  recorded  for  the  retract  motion  and  the 
other  test  conditions  resembles  the  Figure  40  data  with 
only  the  elapsed  time  varying.  The  extend  and  retract  times 
measured  for  each  test  condition  are  the  following: 

Extend  Time  Retract  Time 
in  Seconds  in  Seconds 

Test  Condition  1 .28  .43 

Test  Condition  2 .38  .43 

Test  Condition  3 .24  .41 
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FIGURE  37  Hysteresis  - Condition  1 - YU  Input 
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FIGURE  40  Actuator  Saturation  Velocity  - Condition  1 
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For  the  demonstration  system,  the  valve  sleeve  was 
constructed  with  symmetrical  porting  (i.e.  the  open  port- 
ing area  for  the  valve  was  the  same  for  all  cylinder  ports). 
The  normal  F-4E  actuator  control  valve  is  asymmetrical 
with  unequal  area  porting  corresponding  to  the  actuator 
unequal  drive  areas.  The  asymmetrical  porting  gives 
more  equal  extend  and  retract  maximum  rates. 

The  retract  rate  for  all  three  test  conditions  was 
essentially  identical,  indicating  that  the  force  motors 
were  able  to  position  the  control  spool  at  its  maximum 
stopped  deflection  for  each  test  condition.  The  extend 
times  varied  from  one  test  condition  to  another.  For 
test  conditions  1 and  3,  the  extend  times  were  essenti- 
ally the  same.  For  test  condition  2 (with  one  force  mo- 
tor positioning  the  control  valve)  the  extend  time  in- 
creased 36%  from  test  condition  1.  This  indicates  that 
for  test  condition  2,  the  flow  forces  on  the  control  valve 
were  large  enough  (when  added  to  the  spring  force  of  the 
suspension)  to  prevent  the  control  valve  from  reaching  the 
full  extend  motion  deflection.  The  amount  of  change  of 
the  extend  rate  was  not  great  enough  to  use  flow  force 
compensation  for  the  control  spool  of  the  demonstration 
actuator.  The  use  of  asymmetrical  porting,  increasing 
drive  current  to  the  force  motors  or  a lower  suspension 
stiffness  would  equalize  the  maximum  extend  rate  for  the 
test  conditions. 

Figures  41,  42  and  43  show  the  recorded  response  of 
the  direct  drive  system  to  a step  command  input.  The 
step  response  for  all  test  conditions  is  exponential  and 
does  not  exhibit  any  overshoot  or  ringing.  This  step 
response  of  the  system  is  consistent  with  the  frequency 
response  measurements.  For  all  the  test  conditions  a .3 
volt  amplitude  step  was  used  as  the  input.  This  is 
approximately  an  input  command  of  10%  of  the  full  actu- 
ator position  command.  The  response  times  to  rea<-h  c 
of  the  final  value  for  each  test  condition  (as  take 
from  Figures  41,  42  and  43)  is  the  following: 


w 
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FIGURE  41  Step  Response  - Condition  1 
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FIGURE  A3  Step  Response  - Condition  3 
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The  response  times  for  test  conditions  1 and  3 are 
similar.  Test  condition  2 shows  response  times  approxi- 
mately twice  as  long  as  for  test  conditions  1 and  3.  This 
is  consistent  with  the  reduction  of  force  gain  (and  the 
control  loop  gain)  with  the  loss  of  one  control  channel. 


3.5.7  Failure  Removal  Transients 


Figure  44  shows  the  effect  on  the  system  output  of  a 
hardover  input  injected  into  channel  2 command  channel  while 
all  other  inputs  are  left  at  zero  level.  The  fail  indicate 
channel  shown  on  Figure  44  is  a recording  of  the  failure 
logic  output  voltage  which  disconnects  the  command  channel 
2 from  control  of  the  system.  There  is  no  observable  tran- 
sient deviation  of  the  output  upon  the  application  of  the 
step  input.  A static  offset  of  the  system  output  does 
occur.  The  amplitude  of  the  offset  is  .0014  inches  which 
is  .06  percent  of  the  total  system  output  stroke.  The  off- 
set reflects  the  small  null  offset  between  the  two  command 
channels  of  the  system  and  a corresponding  output  change 
when  one  channel  is  disconnected. 

Figure  45  shows  the  effect  on  the  system  output  of  a 
hardover  input  injected  into  channel  2 command  while  all 
inputs  are  being  commanded  by  a .8  Hz  signal.  Transient 
deviation  of  the  actuator  output  is  .010  inches  or  .46 
percent  of  the  total  actuator  stroke. 

Figure  46  shows  the  effect  on  the  system  output  of  a 
slowover  input  applied  to  channel  2 command  with  channel  1 
and  channel  2 monitor  input  grounded.  The  maximum  actuator 
position  deviation  is  .018  inches  or  .82  percent  of  the  total 
actuator  stroke. 


DYNAMIC  CONTROLS,  INC. 
Test  Data 

TEST  ITEM  - Direct  Drive  Fly- By-Wire 


Date 

Prepared:  4-26-77 


TEST  - Dynamic  Failure  - Hardover  Into  Channel  2 Command 
Input 


!:  !illii!pii 

iilHiii 
iiiiiiil  i 

mm 
mm 
mm 


iiiliifilli 

lil!i!i!i!!!li 

liiiliiiiiliil 

j!!!!!!ii!lli! 

UHiiililiiii 


in 

iiii 

II  i 
ill 

I 

III 


Ch  I 

Command 

Input 


SCALE: 

20  div/sec 


50  mv/div 


llillilli 

llliliill 

’lliillii 

|r!iii!l 

I’iiii 


■illiliiililliii!: 
iiilllilHHilllllii 
IlllliliiSi 

KPH 


ill  I 
III! 
IIII 
mi 
mil 


4— +-4-  \ 


4— + — I — 4 


4 1 1 1 1 4— 


Ch  2 

Command 

Input 


Ch  2 
Fail 

Indicate 


.005  in/div 


50  mv/div 


2 v/div 
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Table  1 is  a summary  table  of  the  failure  mode  tests 
performed  on  the  direct  drive  system  in  order  to  verify  the 
failure  modes  of  the  system.  Component  failures  1 through 
9 are  open  connector  failures  of  the  power  and  signal  connec- 
tors used  in  one  channel  of  the  direct  drive  system.  Com- 
ponent failures  10  through  20  are  individual  signal  input 
or  output  lines  or  one  channel  grounded.  Component  failures 
21  through  34  are  open  individual  signal,  test  or  output 
lines.  Component  failures  35  through  41  are  hardover  indi- 
vidual input  and  output  failures.  Component  failures  42 
through  49  are  failures  of  either  the  positive  or  negative 
supply  voltage  to  a control  channel  module.  Failure  50 
is  a hydraulic  supply  failure. 

The  failure  testing  for  the  connector  opens  was  accom- 
plished by  physically  disconnecting  the  connector.  Indivi- 
dual line  opens,  grounds  and  hardover  failures  were  accom- 
plished with  a test  box  inserted  in  the  particular  line 
being  tested. 

Note  that  no  failure  of  a component  results  in  a total 
system  failure  or  a failure  that  is  not  detected  either  im- 
mediately or  upon  ground  checkout.  A hydraulic  failure  of 
one  supply  system  is  not  detected  by  the  FBW  system,  although 
ground  check  of  system  output  operation  with  each  control 
channel  alternately  failed  could  be  used  to  check  that 
hydraulic  pressure  is  being  supplied.  Normally,  instrumen- 
tation is  provided  in  the  aircraft  for  monitoring  hydraulic 
system  output  and  detecting  failure  of  hydraulic  supply. 


Although  open  and  ground  failures  of  the  cross- strap 
are  evaluated,  hardover  failures  are  not.  A hardover  voltage 
applied  to  the  cross-strap  connection  will  cause  a channel 
hardover  and  a failure  of  the  total  system.  The  cross- 
strap wiring  is  therefore  routed  separately  and  not  in 
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TABLE  1 

FAILURE  MODE  TEST  RESULTS 


COMPONENT  FAILURE 

FAILURE  INDICATION 

1. 

Monitor  Amp  Input 
Connector  Open 

Channel  Failure  Light 

2. 

Command  Amp  Input 
Connector  Open 

Channel  Failure  Light 

3. 

Comparator  Input 
Connector  Open 

Current  Lights  For 
Channel 

vo  Amp  Input 
.^nnector  Open 

Current  Lights  For 

Amp 

5. 

Stick  Output 
Connector  Open 

Channel  Failure  Light 

6. 

Monitor  Amp  Power 
Connector  Open 

Channel  Failure  Light 

7. 

Command  Amp  Power 
Connector  Open 

Channel  Failure  Light 

8. 

Comparator  Power 
Connector  Open 

Current  Lights  For 
Channel 

Servo  Amp  Power 
Connector  Open 


Current  Lights  For 
Amp 


FAILURE  EFFECT 

Channel  Failed  soft, 
System  Operable 

Channel  Failed  Soft, 
System  Operable 

Channel  Failed  Soft, 
System  Operable. 
Failure  Detected  on 
Ground  Check 

Channel  Failed  Soft, 
System  Operable. 
Failure  Detected  on 
Ground  Check 

Channel  Failed  Soft, 
System  Operable. 

Channel  Failed  Soft, 
System  Operable. 

Channel  Failed  Soft, 
System  Operable. 

Channel  Failed  Soft, 
System  Operable. 
Failure  Detected  on 
Ground  Check 

Channel  Failed  Soft, 
System  Operable. 
Failure  Detected  on 
Ground  Check 


TABLE  1 (Cont'd.) 


FAILURE  MODE  TEST  RESULTS 


COMPONENT  FAILURE 


FAILURE  INDICATION 


FAILURE  EFFECT 


Monitor  Amp  Command 
Input  Grounded 

Monitor  Amp 
Feedback  Input 
Grounded 

Monitor  Amp 
Output  Grounded 

Command  Amp 
Command  Input 
Grounded 

Command  Amp 
Feedback  Input 
Grounded 

Command  Amp 
Output  to 

Comparator  Grounded 

Comparator  Output 
Grounded 


Servo  Amp  #1 
Input  Grounded 


Servo  Amp  #2 
Input  Grounded 


Channel  Failure  Light 


Channel  Failure  Light 


Channel  Failure  Light 


Channel  Failure  Light 


Channel  Failure  Light 


Channel  Failure  Light 


Current  Lights  For 
Channel 


Current  Lights  For 
Amp 


Current  Lights  For 
Amp 


Channel  Failed  Soft, 
System  Operable 

Channel  Failed  Soft, 
System  Operable 


Channel  Failed  Soft, 
System  Operable 

Channel  Failed  Soft, 
System  Operable 


Channel  Failed  Soft, 
System  Operable 


Channel  Failed  Soft, 
System  Operable 


Channel  Failed  Soft, 
System  Operable. 
Failure  Detected  on 
Ground  Check 

Channel  Failed  Soft, 
System  Operable. 
Failure  Detected  on 
Ground  Check 

Channel  Failed  Soft, 
System  Operable. 
Failure  Detected  on 
Ground  Check 


TABLE  1 (Cont'd.) 


FAILURE  MODE  TEST  RESULTS 


COMPONENT  FAILURE  FAILURE  INDICATION 


FAILURE  EFFECT 


19.  Servo  Amp  Output  Current  Lights  For 
Grounded  Amp 


Channel  Failed  Soft 
System  Operable. 
Failure  Detected  on 
Ground  Check 


Current  Lights  For 
Channel 


System  Operates 
Normally,  Failure 
Detected  on  Ground 
Check 


20.  Servo  Amp  Cross 
strap  Grounded 


Channel  Failure  Light  Channel  Failed  Soft 

System  Operable 


21.  Monitor  Amp 

Command  Input 
Open 


Channel  Failure  Light  Channel  Failed  Soft 

System  Operable 


22.  Monitor  Amp  Feed 
back  Input  Open 


Channel  Failed  Soft 
System  Operable 


23.  Monitor  Amp  Output  Channel  Failure  Light 
Open 


No  Failure  Transfer 
During  Logic  Test 


System  Operates 
Normally,  Failure 
Detected  on  Ground 
Check 


24.  Monitor  Amp  Test 
Input  Open 


Channel  Failure  Light  Channel  Failed  Soft 

System  Operable 


25.  Command  Amp 

Command  Input 
Open 


Channel  Failure  Light  Channel  Failed  Soft 

System  Operable 


26 . Command  Amp 

Position  Input 
Open 


Channel  Failed  Soft 
System  Operable 


27.  Command  Amp  Relay  Channel  Failure  Light 
Input  Open 


TABLE  1 (Cont'd.) 
FAILURE  MODE  TEST  RESULTS 


...  . . - 2 
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COMPONENT  FAILURE  FAILURE  INDICATION  FAILURE  EFFECT 


28 . Command  Amp  Out- 
put to  Monitor 
Open 

29.  Command  Amp  Out- 
put to  One  Servo 
Amp  Open 

30.  Command  Amp  Out- 
put to  Both  Servo 
Amps  Open 


31.  Comparator  Reset 
Input  Open 


32.  Servo  Amp  Output 
Open 


33.  Servo  Amp  Cross- 
strap Open 


34.  Monitor  Amp 

Command  Input 
Hardover 


Channel  Failure  Light 


Current  Lights  For 
Amp 


Current  Lights  For 
Channel 


No  Failure  During 
Reset  Logic  Test 


Current  Lights  For 
Amp 


Current  Lights  For 
Channel 


Channel  Failure  Light 


Channel  Failed  Soft, 
System  Operable 


Channel  Failed  Soft, 
System  Operable. 
Failure  Detected  on 
Ground  Check 

Channel  Failed  Soft, 
System  Operable. 
Failure  Detected  on 
Ground  Check 

System  Operates 
Normally,  Failure 
Detected  on  Ground 
Check 

Channel  Failed  Soft, 
System  Operable. 
Failure  Detected  on 
Ground  Check 

System  Operates 
Normally,  Failure 
Detected  on  Ground 
Check 

Channel  Failed  Soft, 
System  Operable 


35.  Monitor  Amp  Feed-  Channel  Failure  Light  Channel  Failed  Soft, 
back  Input  System  Operable 

HarHnvor 
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« 

4 


h- 

l 


TABLE  1 (Cont'd.) 
FAILURE  MODE  TEST  RESULTS 


COMPONENT  FAILURE 

FAILURE  INDICATION 

FAILURE  EFFECT 

j 

36. 

Command  Amp 

Command  Input 
Hardover 

Channel  Failure  Light 

Channel  Failed  Soft, 
System  Operable 

1 

1 

37. 

Command  Amp 
Feedback  Input 
Hardover 

Channel  Failure  Light 

Channel  Failed  Soft, 
System  Operable 

38. 

Command  Amp  Out- 
put to  Comparator 
Hardover 

Channel  Failure  Light 

Channel  Failed  Soft, 
System  Operable 

39. 

Comparator  Output 

No  Failure  During 

Channel  Failed  Soft, 

! 

Hardover 

Logic  Test 

System  Operable. 
Failure  Detected  on 
Ground  Check 

I 

40. 

Servo  Amp  Input 
Hardover 

Current  Lights  For 
Channel 

Channel  Failed  Soft, 
System  Operable. 
Failure  Detected  on 
Ground  Check 

41. 

Servo  Amp  Output 
Hardover 

Current  Lights  For 
Channe 1 

Channel  Failed  Soft, 
System  Operable. 
Failure  Detected  on 
Ground  Check 

42. 

Command  Amp 
+ Supply  Voltage 

Channel  Failure  Light 

Channel  Failed  Soft, 
System  Operable 

43. 

Command  Amp 
- Supply  Voltage 

Channel  Failure  Light 

Channel  Failed  Soft, 
System  Operable 

44. 

Monitor  Amp 
+ Supply  Voltage 

Channel  Failure  Light 

Channel  Failed  Soft, 
System  Operable 
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TABLE  1 (Cont'd.) 


FAILURE  MODE  TEST  RESULTS 


COMPONENT  FAILURE 


FAILURE  INDICATION 


FAILURE  EFFECT 


Monitor  Amp 
- Supply  Voltage 

Comparator 
+ Supply  Voltage 


Channel  Failure  Light 


No  Failure  During 
Logic  Test 


Channel  Failed  Soft, 
System  Operable 

Channel  Failed  Soft, 
System  Operable. 
Failure  Detected  on 
Ground  Check 


Comparator 
- Supply  Voltage 

Servo  Amp 
+ Supply  Voltage 


Channel  Failure  Light 


Current  Lights  For 
Amp 


Channel  Failed  Soft, 
System  Operable 

Channel  Failed  Soft, 
System  Operable. 
Failure  Detected  on 
Ground  Check 


Servo  Amp 
- Supply  Voltage 


Current  Lights  For 
Amp 


Channel  Failed  Soft, 
System  Operable. 
Failure  Detected  on 
Ground  Check 


Hydraulic  Supply  None 


Channel  Fails  Soft, 
Failure  Detected  with 
Normal  Aircraft 
Instrumentation  For 
The  Hydraulics 


1 I — - ■■  • 


proximity  to  any  line  carrying  a voltage.  This  is  a 
constraint  on  using  the  system  and  was  applied  in  the 
design  of  the  evaluation  system. 

3.5.9  Cross-strap  Operation 


The  use  of  the  cross-strap  for  a common  feedback  sig- 
nal for  each  servo  amp  prevents  a single  amplifier  hard- 
over  failure  from  causing  an  actuator  output  change.  With- 
out the  cross-strap,  an  amplifier  going  hardover  would  be 
offset  by  the  resulting  actuator  motion  causing  the  other 
servoamplifiers  to  offset  the  failed  servo  amp.  With  the 
cross-strap  feedback,  the  other  amplifier  of  a channel 
with  a hardover  servo  amp  offsets  the  hardover  failure 
before  the  actuator  moves  in  response  to  the  hardover 
failure.  The  following  test  results  (with  a hardover  input 
applied  to  one  servo  amp)  illustrate  the  operational 
characteristics . 


Mode 


With  Cross-strap 


Servo  Amp 
#1  Current 
In  Amperes 


Servo  Amp 
#2  Current 
In  Amperes 


-.903  1.156 


Without  Cross-strap  .061  1.163 


Note  that  without  the  cross-strap,  the  output  of  the  am- 
plifier goes  hardover.  With  the  cross-strap,  the  hard- 
over  is  almost  completely  offset  by  the  opposite  current 
generated  in  the  other  servoamplifier. 
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4.0  RESULTS  SUMMARY  AND  CONCLUSIONS 


i 


In  terms  of  both  component  and  system  performance,  the 
direct  drive  FBW  mechanization  meets  or  exceeds  the  design 
objectives . 

In  terms  of  nominal  control  system  performance  para- 
meters, the  system  mechanization  provides  excellent  frequency 
response.  The  moving  coil  force  motor  has  a sufficiently 
high  frequency  response  that  the  control  system  response  of 
5 Hz  at  no  more  than  90°  phase  shift  is  easily  obtained. 

The  force  motor  90°  phase  shift  when  driving  the  control 
valve  spool  occurs  above  50  Hz.  The  force  motor  amplitude 
is  well  damped  and  shows  no  peaking.  These  characteristics 
allow  using  a control  system  gain  setting  which  would  give 
actuator  flat  response  out  to  20  Hz  with  no  peaking. 

The  system  exhibits  satisfactory  threshold,  hysteresis 
and  linearity  characteristics  both  in  the  normal  and  the 
fail  operational  mode.  The  degradation  of  threshold  and 
hysteresis  measurements  from  the  normal  to  the  fail  operate 
mode  corresponds  to  the  reduction  in  force  gain  with  the 
loss  of  one  force  motor.  Maximum  threshold  measured  was 
1.667o  of  maximum  command  input  while  in  the  fail  operational 
mode.  Maximum  hysteresis  was  ,557<>  of  maximum  command  input 
while  in  the  fail  operate  mode.  These  numerical  values 
are  without  any  dither  signal  and  are  halved  in  the  normal 
operating  mode. 

The  full  actuator  rates  were  identical  in  the  fail 
operate  and  normal  operating  modes.  The  extend  rate  de- 
graded slightly  from  the  normal  to  the  fail  operate  mode, 
due  to  the  flow  forces  on  the  control  spool.  The  frequency 
response  in  the  fail  operate  mode  degraded  from  the  normal 
mode  by  about  507.  as  expected.  This  characteristic  is 
inherent  in  a force  sharing  system  configuration  like  the 
direct  drive  FBW  system  and  requires  that  the  normal  oper- 
ating response  be  set  high  enough  to  allow  degradation  in 
the  fail  operate  mode  with  one  control  channel  failed. 

The  failure  transients  measured  on  the  direct  drive 
system  were  all  below  17,  of  the  maximum  actuator  motion. 

The  largest  transient  experienced  was  with  a slowover 
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input  failure  into  one  channel  which  resulted  in  a .82% 
transient  deviation  of  the  maximum  actuator  motion.  The 
transients  are  directly  determined  by  the  failure  logic 
settings  which  for  the  direct  drive  system  can  be  set 
quite  low  without  encountering  nuisance  disconnects. 

The  failure  mode  testing  revealed  no  single  failures 
which  would  fail  the  entire  system.  All  failures  were 
indicated  either  immediately  or  upon  ground  checkout. 

In  terras  of  a direct  drive  force  motor,  the  moving 
coil  force  motor  generates  40  pounds  of  output  force  for 
16  watts  dach  driver.  The  force  motor  is  not  limited  by 
magnetic  saturation  characteristics  to  the  40  pounds  force 
and  the  force  output  can  be  increased  with  increased  input 
current.  The  frequency  response  characteristics  are 
consistent  with  FBW  electrohydraulic  response  requirements 
for  a direct  drive  force  motor. 

From  the  test  results  on  the  system,  it  is  concluded 
that  the  mechanization  is  a viable  candidate  for  a single 
fail  operate  FBW  system.  The  system  is  simple  in  execu- 
tion and  has  sufficiently  low  parts  count  to  allow  practical 
development  of  the  components  for  maximum  system  reliability. 


SECTION  II 


PARKER-HANNIFIN  REDUNDANT  ACTUATOR  EVALUATION 


1.0  INTRODUCTION 


1.1  Test  Approach  - General 

1 

This  section  of  the  report  describes  the  test  of  a 
Fly-By-Wire  tandem  actuator  mechanization  developed  by 
Parke r-Hannif in  Aerospace  Hydraulics  Division,  Irvine, 

California  and  submitted  to  the  Air  Force  Flight  Dynamics 
Laboratory  at  Wright-Patterson  AFB  for  evaluation.  The 
purpose  of  the  test  sequence  used  for  the  actuator  evalu- 
ation was  to  obtain  input-output  performance  data  in 
order  to  document  the  characteristics  of  the  mechaniza- 
tion in  terms  of  control  and  redundancy  parameters.  No 
attempt  was  made  as  part  of  the  investigation  to  estimate 
and  establish  reliability  of  the  unit. 


1.2  Description  of  Unit 


The  mechanization  submitted  by  Parker-Hannif in  con- 
sisted of  two  interdependent  units,  the  actuator  and  the 
control  console.  According  to  the  manufacturer,  the 
actuator  is  representative  of  flight  type  hardware.  The 
control  console,  on  which  the  mechanization  depended  for 
many  of  its  operating  characteristics,  was  constructed 
as  a laboratory  demonstration  item  and  was  not  represen- 
tative of  flight  hardware. 

The  actuator  evaluated  was  designed  to  operate  with 
two  independent  hydraulic  supplies,  four  electrical  input 
signals  and  incorporated  a mechanical  input  reversion  capa- 
bility. FIGURE  47  is  a Parker-Hannifin  schematic  of  the 
actuator.  The  actuator  is  constructed  with  a manifold  using 
ripstop  construction  for  the  mounting  of  all  valves  and 
linkages.  FIGURE  48  shows  the  actuator  in  hardware  form. 
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FAILURE  DETECTION  LVDT 


FEEDBACK  LVDT 


_____ 


I 


The  system  parameters  for  the  actuator  as  stated  by 
Parker-Hannifin  are  the  following: 


Operating  Pressure: 
Actuator  Stroke: 
Output  Force: 
Nominal  Loop  Gain: 
Maximum  Velocity: 


Master  Control  Valve 
Stroke : 


3000  psi  supply 

+ 2.9  inches 

16,400  lbs. 

30  radians /sec. 

9 in. /sec.  electrical 
input,  6.5  in.  / sec . 
manual  input 


+ .070  inches 


The  redundancy  approach  taken  for  mechanizing  the 
electro-hydraulic  section  of  the  actuator  is  to  use  4 
electro-hydraulic  servo  actuators  in  a combined  force 
and  position  summing  arrangement.  The  servo  actuators 
are  short  stroke  and  resemble  the  general  configuration 
of  a two  stage  jet-pipe  servo  valve  without  the  hydrau- 
lic metering  provisions  for  the  second  stage  spool.  A 
mechanical  feedback  spring  is  used  to  close  each  servo 
actuator  position  back  to  the  torque  motor  which  drives 
the  jet-pipe  first  stage.  Mechanical  feedback  forces 
each  servo  actuator  to  have  an  output  position  propor- 
tional to  the  input  current  into  its  torque  motor.  The 
servo  actuators  are  attached  to  a common  output  shaft 
in  pairs.  Each  pair  is  connected  to  the  end  of  a com- 
mon link,  the  center  of  which  is  attached  to  the  out- 
put shaft.  The  center  motion  of  the  common  link  is  an 
average  of  the  motions  of  the  two  servo  actuators  at- 
tached to  its  ends.  This  is  the  position  summing  por- 
tion of  the  summing  mechanization.  Since  two  position 
summing  links  are  used  and  both  are  attached  to  the 
command  shaft,  coupling  of  the  summing  links  centers 
creates  a force  summing  of  the  two  pairs  of  servo 


actuators.  The  command  shaft  output  is  used  to  drive 
a tandem  control  valve.  To  eliminate  free  play  in  the 
summing  and  control  valve  connection  linkage,  the  end 
of  the  control  valve  is  pre loaded  with  a coil  spring 
operating  in  compression. 


For  servo  valve  failure  detection,  the  mechaniza- 
tion uses  two  LVDT  position  transducers  to  monitor  the 
differential  motion  of  the  position  summing  links.  If 
the  position  outputs  of  each  pair  of  servo  actuators 
fails  to  track  each  other  within  a selected  tolerance, 
the  LVDT  output  change  is  used  to  indicate  that  a fail- 
ure has  occurred.  To  prevent  an  incorrectly  operating 
servo  actuator  pair  from  interfering  with  the  remaining 
pair  of  servo  actuators,  two  shut-off  solenoid  valves 
are  incorporated  into  the  actuator.  Each  solenoid  is 
used  to  disconnect  hydraulic  pressure  from  one  pair  of 
servo  actuators. 


The  actuator  mechanization  also  incorporates  pro- 
visions for  mechanical  input  control.  This  mode  of 
control  uses  a separate  control  valve  connected  to  an 
external  input  linkage.  The  input  linkage  can  be  used 
for  manual  input  control  or  to  power  the  actuator  to  a 
selected  position.  Engagement  of  the  manual  input  con- 
trol valve  is  determined  by  a transfer  valve.  The 
transfer  valve  is  controlled  by  the  hydraulic  pressures 
from  the  two  solenoid  shut-off  valves  which  deactivate 
the  electro-hydraulic  servo  actuator  pairs.  When  a shut- 
off solenoid  valve  is  used  to  deactivate  one  pair  of 
servo  actuators,  the  open  center  characteristic  of  the 
jet-pipe  first  stage  prevents  the  deactivated  servo 
actuator  pair  from  restricting  the  motion  of  the  remain- 
ing active  pair  of  servo  actuators.  Deactivation  of 
both  servo  actuator  pairs  causes  the  transfer  valve  to 
transfer  control  from  the  normal  operation  to  the  back- 
up control  valve. 


The  torque  motor  coils  of  each  servo  valve  are  made 
up  of  4 separate  sections.  Each  coil  section  of  the  tor- 
que motors  is  connected  in  series  with  a corresponding 
section  of  the  other  three  torque  motors.  Four  separate 
amplifiers  are  used  to  drive  the  servo  actuators.  A servo 
amplifier  is  connected  to  each  of  the  four  series  connected 
coil  sections.  The  net  torque  motor  output  and  the  servo 
actuator  position  for  each  servo  actuator  is  therefore 
proportional  to  the  sum  of  the  coil  currents  from  all 
four  servo  amplifiers.  Since  the  output  current  of  each 
servo  amplifier  is  connected  to  all  four  servo  actuator 
torque  motors,  current  differences  between  servo  ampli- 
fiers cannot  cause  output  position  differences  between 
the  individual  servo  actuators. 


The  control  console,  as  shown  in  FIGURE  49  was  pro- 
vided by  Parker-Hannif in  for  use  with  the  actuator.  This 
console  contains  the  failure  detection  lugic,  gain  chang- 
ing, servo  amplifiers,  and  status  display  indicators  for 
operating  the  actuator.  To  provide  for  failure  detection 
of  both  servo  actuator  failures  and  servo  amplifier  out- 
put disagreements,  the  control  console  uses  two  failure 
logic  sections. 

One  section  is  used  to  monitor  the  failure  detection 
LVDT  outputs.  The  other  section  is  used  to  monitor  the 
servo  amplifier  output  currents.  Since  the  servo  actua- 
tor torque  motor  coils  share  the  current  outputs  of  all 
four  servo  amplifiers,  the  servo  actuator  LVDT  failure 
logic  cannot  detect  any  failure  other  than  the  failure 
of  servo  actuator  hydro-mechanical  components.  Therefore, 
the  second  section  of  the  failure  logic  is  required  to 
monitor  the  servo  amplifier  currents.  Since  servo  ampli- 
fier currents  reflect  the  difference  between  electrical 
command  and  electrical  feedback  voltages,  failures  of 
both  input  and  feedback  voltages  are  detected  along  with 
failures  of  the  servo  amplifiers. 
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The  logic  used  in  the  control  console  for  hydro- 
mechanical failures  monitored  the  output  of  each  fail- 
ure LVDT.  Above  a set  output  amplitude,  the  logic 
activates  the  shutoff  solenoid  for  the  corresponding 
servo  actuator  pair.  To  demonstrate  operation  of  the 
failure  logic,  the  control  console  incorporates  bias 
potentiometers  and  failure  switches  in  order  to  simu- 
late a position  disparity  of  the  servo  actuators. 


The  control  console  logic  used  for  detecting  the 
servo  amplifier  failures  is  designed  to  represent  the 
general  characteristics  of  a current  comparison  and 
majority  vote  failure  detection  technique.  The  servo 
amplifiers  used  to  drive  the  servo  actuators  are  a 
current  amplifier  design.  The  voter  design  is  based 
on  comparing  the  current  of  channels  1,  2 and  3 servo 
amplifier  against  channel  4's  servo  amplifier  current. 
This  voting  is  not  a majorit>  voting  technique  (since 
3 channels  are  compared  only  to  one  reference  channel) 
However,  for  selected  failures,  the  failure  detection 
characteristics  are  the  same  as  if  an  actual  majority 
voter  were  used.  Disagreement  of  channel's  1,  2 and 
3 servo  amplifier  current  with  channel  4's  current 
caused  a comparator  to  disconnect  the  output  of  the 
disagreeing  servo  amplifier.  To  reduce  the  occurrence 
of  nuisance  disconnects  caused  by  transients,  the  in- 
put to  each  comparator  is  filtered  with  a low  pass 
RC  filter. 


The  logic  also  incorporates  a gain  network  which 
increased  the  gain  of  the  remaining  servo  amplifiers 
when  any  servo  amplifier  is  disconnected.  Without  the 
gain  changer,  the  actuator  frequency  response  would 
degrade  with  each  servo  amplifier  disconnected.  This 
degradation  is  inherent  with  the  mechanization,  since 
control  valve  position  is  proportional  to  the  sum  of 
the  servo  amplifier  current.  A reduction  of  control 
valve  position  for  a given  input  error  voltage  appears 
as  a flow  gain  reduction  of  the  control  valve  (and 
hence  a frequency  response  reduction  for  the  actuator) 


FIGURE  49  Parker-Hannifin  Control  Console 


2 . 0 TEST  PROCEDURE 
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2.1  Introduction 


The  objective  in  testing  the  Parker-Hannif in 
actuator  was  to  establish  the  performance  parameters 
and  redundancy  operating  characteristics  of  the  mech- 
anization as  a control  element  in  the  Fly-By-Wire  con- 
trol system.  For  this  evaluation,  the  actuator  and 
control  console  were  treated  as  a "black  box"  and  the 
output  of  the  actuator  for  selected  inputs  (both  elec- 
trical command  and  hydraulic  power)  was  measured. 

Since  the  control  console  was  not  representative  of 
flight  hardware,  electrical  supply  power  input  varia- 
tions were  not  included  in  the  evaluation.  Since  a 
redundancy  mechanization  is  supposed  to  continue  its 
control  element  function  after  selected  failures,  the 
evaluation  measured  the  actuator  performance  before  and 
after  injected  failures. 


In  general,  the  following  evaluations  were  con- 
ducted. 


1.  Evaluation  of  input-output  performance 

2.  Evaluation  of  transients  during  failure 
removal 

3.  Evaluation  of  failure  trip  sensitivity 

The  parameters  measured  for  the  input-output  per- 
formance evaluation  were: 


a.  Threshold  - static  and  dynamic 

j 
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b.  Frequency  response  and  distortion 
small  and  large  signal 

c.  Linearity  and  Hysteresis 


» 


d.  Time  response  - large  and  small 
step  input 


These  performance  parameters  were  measured  under 
the  conditions  of  no  failures,  after  selected  failures, 
and  with  input  deviations  near  the  failure  trip  level 
for  the  particular  input.  The  failure  transient  eval- 
uation documented  the  actuator  output  change  during 
the  failure  correction  action  due  to  hydraulic  or  elect- 
ical  failures.  The  failure  trip  sensitivity  testing 
documented  the  variation  of  electrical  or  hydraulic  in- 
puts which  caused  the  actuator  to  indicate  a failure. 

In  order  to  apply  separate  electrical  command  inputs 
to  the  four  electrical  channels  of  the  actuator  control 
console,  it  was  necessary  to  modify  the  electrical  input 
circuitry  of  the  console  slightly.  This  was  done  with 
Parker-Hannif in' s approval. 


For  all  testing  performed  on  the  actuator  and  con- 
sole, the  actuator  was  mounted  in  the  General  Purpose 
Xctuator  Test  Rig  (GPATR)  in  Bldg.  145  at  Wright- 
Pacterson  AFB,  Ohio.  FIGURE  50  shows  the  actuator  and 
console  as  mounted  during  testing.  The  patch  box  to 
the  left  of  the  control  console  box  in  FIGURE  50  is  an 
interface  box  used  to  connect  the  laboratory  instrumen- 
tation to  the  control  console.  For  hydraulic  power,  the 
actuator  was  connected  to  a 30  GPM  supply  through  pressure 
reducing  valves  with  allowed  variation  of  the  hydraulic 
supply  pressure.  FIGURE  51  shows  the  actuator  mounted 
in  the  GPATR  frame  and  the  hydraulic  connections  to  the 
actuator. 
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PROJECT  MATERIA 


FIGURE  50  Test  Actuator  and  Control  Console  During  Testing 


2.2  General  Test  Procedure 

The  following  general  test  procedure  was  used  for 
the  measurements  on  the  Parker-Hannifin  actuator.  This 
test  procedure  was  established  by  Dynamic  Controls,  Inc. 
as  a general  procedure  for  any  Fly-By-Wire  actuator  eval- 
uation, and  was  reviewed  by  Parker-Hannifin.  The  test 
procedure  both  defines  the  measured  parameter  and  states 
the  procedure  for  making  the  measurement.  The  procedure 
is  divided  into  the  following  sections: 


1.  Performance  Measurements 

2.  Failure  Effect  On  Performance 

3.  Input  Deviations  Effect 

4.  Failure  Removal  Transients 


2.2.1  Performance  Measurements 


2. 2. 1.1  Threshold 


Static  Threshold  - "The  minimum  input  change  from 

zero  level  which  causes  a meas- 
urable output  change." 

Procedure  - Apply  a slowly  increasing  + 

input  until  a measurable  output 
change  occurs.  Repeat  for  - in- 
put. Threshold  is  indicated  by 
the  minimum  input  change  for  a 
measurable  output  change. 

Dynamic  Threshold  - "The  input  level  (at  a particu- 
” lar  frequency)  required  to  cause 

a measurable  output  level." 
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Procedure 


A sinusoidal  input  at  a selec- 
ted frequency  of  50%  of  the 
bandpass  of  the  actuator  is 
applied  to  the  actuator.  The 
amplitude  of  input  to  create 
a measurable  output  indicates 
the  dynamic  threshold.  The 
bandpass  of  actuator  is  defin- 
ed as  the  frequency  at  which 
- 3db  amplitude  or  90°  phase 
shift  occurs  (whichever  is 
lower  in  frequency) . 


’’requency  Response 


"With  a sinusoidal  actuator  in- 
put, the  frequency  response  of 
the  actuator  is  the  curves  of 
the  amplitude  ratio  and  phase 
shift  as  a function  of  frequen- 
cy." 


Procedure 


A sinusoidal  input  of  an  ampli- 
tude which  is 


a.  large  enough  to  minimize 
the  nonlinearity  distor- 
tions of  threshold  and 
hysteresis 

b.  small  enough  to  avoid 
velocity  saturation  in 
the  frequency  range  of 
interest 

is  applied  to  the  actuator  in- 
put. The  ratio  of  output  amp- 
litude to  input  amplitude  and 
output  phase  relative  to  in- 
put is  recorded. 


5 


The  curves  of  the  amplitude 
ratio  and  phase  indicate  the 
frequency  response. 


"The  amount  of  deviation  of 
the  actuator  output  from  the 
input  waveform." 

The  harmonic  distortion,  at 
the  input  level  used  to  meas- 
ure the  frequency  response,  is 
recorded  at  sinusoidal  input 
frequencies  of  10%,,  50%  and 
100%  of  the  bandwidth. 


"The  deviation  of  output  vs. 
input  from  a straight  line  re- 
lationship." 


Apply  an  input  from  - max  to 
+ max  input  while  recording 
the  corresponding  output  po- 
sition. Linearity  is  indica- 
ted by  max  deviation  of  the 
plotted  output  vs.  input  from 
a straight  line  drawn  between 
zero  and  a point  which  mini- 
mizes the  maximum  deviation 
of  the  plotted  curve  from  the 
straight  line.  Repeat  for  + 
input  to  - input. 
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2.2. 1.5  Hysteresis 


"The  non-coincidence  of  load- 
ing and  unloading  curves." 

Procedure  Apply  a slowly  varying  input 

to  the  actuator  at  10%  and  1% 
of  max  input  in  the  following 
sequence  while  recording  the 
actuator  output  position: 

0 to  + direction  input 

+ input  to  - direction  input 

- input  to  + input 

From  the  plot  of  output  vs. 
input,  the  hysteresis  is  in- 
dicated by  the  difference  be- 
tween + direction  actuator 
output  position  and  - direction 
output  position  for  the  same 
input  level. 


2. 2. 1.6  Time  Response 

Saturation  Velocity  "The  maximum  velocity  at  which 

the  actuator  is  capable  of  mov- 
in  each  direction." 


Procedure  With  the  actuator  at  zero  posi- 

tion, a maximum  amplitude  input 
is  applied  to  the  actuator  while 
the  actuator  motion  vs.  time  is 
recorded.  The  test  is  conducted 
for  both  directions  of  actuator 


motion.  The  slope  of  the  po- 
sition vs.  time  record  indica* 
tes  the  saturation  velocity. 


Transient  Response 


"The  time  response  of  the  ac- 
tuator output  to  an  applied 
step  input." 


Procedure 


Apply  a step  input  to  the  ac- 
tuator and  record  the  correspon 
ding  actuator  motion.  The  amp- 
litude of  the  step  should  be 

a.  large  enough  to  minimize 
the  nonlinearity  distortion 
of  threshold  and  hysteresis 

b.  small  enough  to  avoid  veloc 
ity  saturation. 

The  plot  of  actuator  output 
motion  vs.  time  indicates  the 
transient  response. 


Failure  Effect  On  Performance 


2. 2. 2.1  Failure  Effect 


"The  change  on  the  performance 
of  a redundant  actuator  due  to 
input  failures  or  internal  fail- 
ures of  actuator  components." 


Procedure 


Inject  hydraulic  or  electrical 
input  failures  into  the  actuator 
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under  test  to  cause  it  to  op- 
erate in  its  "failure  opera- 
tional" modes.  For  each  mode, 
measure  the  performance  by  re- 
peating the  Performance  Measure- 
ment Tests.  The  input  levels 
should  be  maintained  at  those 
used  for  the  "no  failure"  per- 
formance tests  unless  the  per- 
formance changes  dictate  dif- 
ferent levels  in  order  to  ob- 
tain reasonable  test  data. 


2.2.3  Input  Deviations  Effect 


2.2. 3.1  Electrical  Deviations 


"The  change  of  electronic  in- 
puts, both  power  and  control, 
with  respect  to  the  normal 
values  and/or  each  other." 

Procedure  Adjust  the  electrical  inputs 

one  at  a time  until  either  the 
maximum  expected  deviation  of 
the  input  is  reached  or  the 
failure  trip  level  is  reached. 
Section  2.2.1  will  be  measured 
with  each  electrical  input  de- 
viation adjusted  one  at  a time 
to  the  maximum  deviation  ex- 
pected or  a value  of  90%  of 
that  which  will  cause  a fail- 
ure trip. 
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2. 2. 3. 2 Hvdraulic_Deviat:ions 

"The  change  of  hydraulic  pres- 
sure inputs  with  respect  to 
the  normal  values." 


Procedure  Adjust  the  hydraulic  inputs 

one  at  a time  until  the  maximum 
expected  deviation  or  a failure 
trip  level  is  reached.  The  per- 
formance parameters  of  Section 
2.2.1  will  be  measured  with  each 
hydraulic  input  adjusted  one  at 
a time  to  the  maximum  deviation 
expected  or  a deviation  value 
of  907o  of  that  which  will  cause 
a failure  trip. 
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2.2.4  Failure  Removal  Transients 


2. 2.4.1  Electrical  Failure  Transients 


"The  change  in  actuator  out- 
put during  failure  corrective 
action  due  to  electronic  input 
failures  causing  transfer  from 
one  operational  mode  to  another." 

Procedure  Apply  a slowly  changing  input 

into  one  control  channel  of 
the  actuator.  Record  the  actu- 
ator output  change  during  the 
corrective  action  of  actuator. 
Repeat  the  test  for  each  con- 
tron  channel  input  and  failure 
mode  condition.  Repeat  for  a 
hardover  step  input. 
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Apply  a sinusoidal  input  to 
all  channels.  Open  each  input 
while  recording  actuator  output. 


2. 2.4. 2 Hydraulic  Failure  Transients 


Procedure 


"The  change  in  actuator  out- 
put during  failure  removal 
corrective  action  due  to 
hydraulic  input  failures 
causing  transfer  from  one 
operational  mode  to  another." 


Apply  a slowly  decreasing 
hydraulic  input  into  one 
control  channel  of  the  actu- 
ator output  change  during  the 
corrective  action  of  the  actu- 
ator. Repeat  the  test  for  all 
hydraulic  inputs. 


Repeat  the  preceding  test  with 
a rapid  decrease  of  hydraulic 
input  pressure. 


2.2.5 


Test  Configuration 


FIGURE  52  is  a block  diagram  schematic  of  the  in- 
strumentation, command  and  power  connections  used  dur- 
ing the  evaluation  of  the  Parker-Hannif in  actuator.  As 
shown  on  the  schematic,  a Bafco  servo  analyzer  was  used 
with  an  Esterline  Angus  XYY'  plotter  for  frequency  re- 
sponse measurements.  The  Hewlett  Packard  Model  333A 
distortion  analyzer  was  used  for  the  input  and  output 
signal  distortion  measurements.  The  Wavetec  Model  144 
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FIGURE  52  Schematic  of  the  Instrumentation,  Command 
and  Power  Connections  During  Evaluation 


sweep  generator  and  the  XYY'  plotter  were  used  for  the 
hysteresis  and  linearity  measurements.  Failure  removal 
transients  were  recorded  on  the  Brush  200  recorder.  The 
400  Hz  exitation  power  required  for  the  control  console 
was  connected  to  laboratory  400  Hz  power.  As  shown  on 
the  schematic,  the  4 separate  input  commands  were  run 
through  a general  purpose  switch  and  potentiometer  panel 
This  panel  allowed  individual  variation  of  the  4 inputs 
separately  and  injection  of  hardover  input  commands. 
Hydraulic  power  was  obtained  from  the  30  GPM,  3000  psi 
laboratory  pumping  system.  Supply  pressure  for  each 
actuator  half  was  connected  through  a pressure  reducing 
valve . 


2.3  Specific  Test  Procedure 


TABLE  2 lists  the  31  different  test  conditions  and 
values  used  for  evaluating  the  Parker-Hannif in  actuator. 
Test  conditions  1-19  and  13-24  refer  to  the  actuator 
testing  on  the  total  actuator  package.  Tests  10-12  and 
25-31  refer  to  the  tests  of  the  control  valve  (secondary 
ram)  motion  with  the  control  of  the  main  ram  locked  out. 
The  purpose  of  testing  the  secondary  ram  without  the 
main  ram  operating  was  to  allow  establishing  the  basic 
characteristics  of  the  secondary  ram  mechanization  with- 
out masking  by  the  particular  actuator  main  ram  it  is 
used  to  drive. 


Test  conditions  1 through  12  are  the  various  op- 
erational modes  of  the  actuator  and  secondary  ram.  For 
each  of  these  operational  modes,  the  performance  mea- 
surement methods  described  in  Sections  2.2.1  were  used 
to  document  the  performance  characteristics.  Note  that 
the  test  conditions  1 and  10  are  the  baseline  test  con- 
ditions for  the  overall  actuator  and  control  valve, 
respectively.  These  two  test  conditions  were  with  all 
inputs  (power  and  control)  at  their  nominal  values  and 
with  no  failure  injected  into  the  mechanization.  The 
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TABLE  2 


Test  Condition 
Number 

i i : 


TEST  CONDITIONS 


Test  Condition  Description 

Main  Ram  Baseline  (all  channels 
nulled,  pressurized  and  operat- 
ing correctly) 

Main  Ram  Electrical  Channel  De- 
viation - +4  ma.  bias  for  chan 

nel  1 servo  valve  current  ( 50% 
of  maximum  valve  coil  current 
= 4 ma . ) 


I 


3 


4 


5 


6 


7 


Main  Ram  Electrical  Channel  De- 
viation - +4  ma.  Deviation  to 

channels  1 and  3 servo  valves 

Main  Ram  Electrical  Channel  De- 
viation - -2  ma.  bias  to  chan- 

nel 1 and  +2  ma.  bias  to  chan- 
nel 3 servo  valves 

Main  Ram  Hydraulic  deviation  - 
(a  1500  psi  with  @ 3000 

psi 

Main  Ram  Electrical  Failure  - 
channel  1 failed  (using  control 
box  fail  switch) 

Main  Ram  Electrical  Failure  - 
channel  1 and  2 failed  (using 
control  box  fail  switches) 
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TABLE  2 


TEST  CONDITIONS  (Cont ' d) 

Test  Condition  Test  Condition  Description 

Number 

8 Main  Ram  Hydraulic  Failure  - 
P]_  @ 0 psi  and  P2  @ 3000  psi 

9 Main  Ram  Hydromechanical  Fail- 
ure - Mode  2 failed  via  control 
box  failure  switch 

10  Secondary  Ram  Baseline  (all  chan- 
nels nulled,  pressurized  and  op- 
erating correctly) 

11  Secondary  Ram  Electrical  Failure  - 
channel  1 and  2 failed  (using 
pulled  relay) 

12  Secondary  Ram  Hydraulic  Failure  - 
P2  @ 0 psi  with  P^  @ 3000  psi 

13  Main  Ram  Failure  Transient  - Elec- 
trical Input  Loss  - 1.0  Hz  sine 
wave  input  initially  driving  all 
channels  to  3%  output  amplitude, 
channel  1 and  then  2 input  grounded 

14  Main  Ram  Failure  Transient  - Elec- 
trical Input  Loss  - 1.0  Hz  sine 
wave  input  initially  driving  chan- 
nels 3 and  4 to  3%  output  ampli- 
tude. Channel  1 and  2 inputs 
grounded.  Channels  3 and  then  4 
inputs  grounded 
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Test  Conditions 
Number 


15 


16 


17 


18 


19 


TABLE  2 


TEST  CONDITIONS  (Cont'd.) 


Test  Condition  Description 


Main  Ram  Failure  Transient  - Elec- 
trical Input  Loss  - 1.0  Hz  sine 
wave  input  initially  driving  all 
channels  to  3 °L  output  amplitude. 
Channel  1 and  2 grounded  simul- 
taneously 


Main  Ram  Failure  Transient  - Elec- 
trical Hardover  Input  - All  chan- 
nels initially  grounded,  Channel  1 
driven  hardover  with  a +10.0  volt 
input 


Main  Ram  Failure  Transient  - Elec- 
trical Hardover  Input  - with  a 
+10.0  volt  hardover  input  in  chan- 
nel 1,  channels  3 and  4 grounded, 
channel  2 is  driven  hardover  with 
a +10.0  volt  input 


Main  Ram  Failure  Transient  - Elec- 
trical Hardover  Input  - with  a 
+10.0  volt  input  in  channels  1 and 
2 and  channel  4 input  grounded, 
channel  3 is  driven  hardover  with 
a +10.0  volt  input 


Main  Ram  Failure  Transient  - Elec- 
trical Hardover  Input  - with  all 
channels  grounded  initially,  chan- 
nels 1 and  2 driven  hardover  simul- 
taneously with  a +10.0  volt  input 
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TABLE  2 


TEST  CONDITIONS  (Cont'd.) 


Test  Condition  Description 


Main  Ram  Failure  Transient  - Ex- 
tend Motion  - Slowover  input  into 
channel  1 input,  channel  2,  3 and 
4 inputs  grounded 

Main  Ram  Failure  Transient  - Re- 
tract Motion  - Slowover  input  into 
channel  1 input,  channel  2,  3 and 
inputs  grounded 

Main  Ram  Failure  Transient  - Hy- 
draulic Failure  - with  all  chan- 
nels grounded  input,  hydraulic 
pressure  P^  shut  off. 

Main  Ram  Failure  Transient  - Hy- 
draulic Failure  - with  a 5 Hz  elec- 
trical input  driving  all  channels 
at  a 37o  output  amplitude,  P-.  was 
failed 

Main  Ram  Failure  Transient  - Hy- 
draulic Failure  - with  a 5 Hz  in- 
put driving  all  channels  at  37, 
output  amplitude  and  P2  at  0 psi, 

P^  was  failed 

Secondary  Ram  Failure  Transient  - 
with  a 0.5  Hz  sine  wave  driving 
all  channels  at  507,  output,  ini- 
tially channel  1 was  grounded  then 
with  channel  1 failed,  channel  2 
was  grounded 
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TABLE  2 


H 


TEST  CONDITIONS  (Cont'd.) 


Test  Condition  Test  Condition  Description 

Number 

26  Secondary  Ram  Failure  Transient  - 
with  a 0.5  Hz  sine  wave  driving 
channel  3 and  4 initially  and 
channel  1 and  2 failed.  The  in- 
put to  channel  3 was  grounded 

27  Secondary  Ram  Failure  Transient  - 
with  a 0.5  Hz  sine  wave  driving 
all  channels  initially  the  inputs 
to  channel  1 and  2 were  grounded 
s imul taneous ly 

28  Secondary  Ram  Failure  Transient  - 
Electrical  Hardover  Input  - all 
channels  initially  grounded,  chan- 
nel 1 driven  hardover  with  a -10.0 
volt  input 

29  Secondary  Ram  Failure  Transient  - 
Electrical  Hardover  Input  - with 
channel  1 failed  and  a -10.0  volt 
input  in  channel  1,  channels  3 and  4 
grounded,  channel  2 is  driven  hard- 
over  with  a -10.0  volt  input 

30  Secondary  Ram  Failure  Transient  - 
Electrical  Hardover  Input  - with 
channels  1 and  2 failed  and  a 
-10.0  volt  input  in  channels  1 


TABLE  2 


TEST  CONDITIONS  (Cont'd.) 


Test  Condition  Description 


Secondary  Ram  Failure  Transient 
Electrical  Hardover  Input  - with 
all  channels  grounded  initially, 
channels  1 and  2 driven  hardover 
simultaneously  with  a -10.0  volt 
input 
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other  test  conditions  correspond  to  the  "Failure  Effect 
On  Performance"  measurements  described  in  Section  2.2.2 
and  "Input  Deviations  Effect"  measurements  described  in 
Section  2.2.3. 


Test  conditions  13  through  31  are  all  failure  tran- 
sient measurement  test  conditions  and  correspond  to  the 
"Failure  Removal  Transients"  measurements  described  in 
Section  2.2.4.  The  test  conditions  13  through  31  state 
both  the  initial  conditions  and  the  test  used  for  creat- 
ing the  transient  condition. 


As  originally  received,  the  failure  detection  logic 
in  the  electronic  console  was  not  operating  properly. 

For  the  input  deviation  effect  tests,  therefore,  the 
electrical  inputs  were  offset  by  an  amount  which  gene- 
rated a 507,  mismatch  of  maximum  servo  valve  coil  current. 
This  is  a representative  value  for  electro-hydraulic  re- 
dundancy mechanizations  which  used  the  loop  error  signal 
for  failure  monitoring.  Subsequent  tests  of  the  failure 
logic  detection  characteristics  were  run  after  the  con- 
sole logic  had  been  corrected  by  Parker-Hannif in  and  it 
was  determined  that  the  control  logic  detection  level 
closely  approximated  the  50%  mismatch  level  used  for 
the  deviation  tests.  The  failure  logic  detection 
characteristic  tests  are  not  listed  in  the  test  condi- 
tion table.  These  tests  were  performed  by  applying  a 
test  input  voltage  into  each  channel's  input  until  the 
failure  logic  tripped  and  indicated  a failure.  This  in- 
put voltage  was  applied  at  selected  frequencies  from  0 
to  8 Hz  in  order  to  establish  the  dependency  of  the 
detection  level  on  signal  frequency. 


3.0  TEST  RESULTS 


3.1  General 


In  order  to  reduce  the  volume  of  test  data  pre- 
sented in  this  section,  the  majority  of  the  performance 
measurement  data  has  been  reduced  to  tabulated  form. 
Since  time  response  characteristics  are  not  well  de- 
fined by  listing  only  one  or  two  characteristic  values, 
the  step  response  measurements  and  the  failure  tran- 
sient measurements  are  presented  as  recorded.  The  fol- 
lowing results  are  presented  in  tabulated  form  for  con- 
ditions 1 through  12: 


1.  Static  Threshold 

2.  Dynamic  Threshold 

3.  Frequency  Response 

4.  Distortion 

5.  Hysteresis 

6.  Saturation  Velocity 


\ 


For  the  test  results  reduced  to  table  form,  a 
sample  of  the  actual  recorded  data  is  included  as  record- 
ed for  conditions  1 and  10.  Also  included  in  recorded  form 
are  the  linearity  measurements  for  conditions  1 through  12. 


In  presenting  the  measurements  of  threshold  and  hys- 
teresis, the  results  are  given  both  in  percent  of  the  in- 
put for  full  actuator  stroke  and  the  input  for  full  valve 
stroke.  In  terms  of  the  percent  of  full  actuator  stroke, 
the  percentage  value  for  a given  amount  of  hysteresis  re- 
duces as  the  maximum  stroke  of  the  actuator  increases. 
Presenting  the  percentage  in  terms  of  the  input  for  max- 
imum control  valve  stroke  shows  the  threshold  and  hyster- 
esis characteristics  better  in  terms  comparing  different 
control  valve  driving  mechanizations  independent  of  the 
power  actuator  sizing. 
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In  performing  tests  with  test  condition  9 (where 
one  pair  of  servo  actuators  are  depressurized  using  the 
failure  switch  provided  on  the  control  console),  it  was 
impossible  to  apply  large  inputs  to  the  actuator  with- 
out the  remaining  servo  actuator  pair  shutting  down. 
Since  it  was  possible  to  run  and  test  the  actuator  with 
only  one  hydraulic  system  operating  (which  duplicated 
the  depressurization  of  one  servo  actuator  pair),  the 
problem  was  apparently  associated  with  the  hydro-mech- 
anical failure  logic  in  the  control  console  and  was  not 
investigated  any  further.  Because  of  this  logic  prob- 
lem, test  data  for  condition  9 was  not  obtained  for  all 
performance  measurements. 


3.2  Specific 


The  specific  test  results  are  presented  in  this 
section  in  the  following  order: 

1.  Performance  measurements  for  conditions 
1 through  12 

2.  Failure  transients  for  conditions  13 
through  31 

3.  Failure  logic  detection  characteristics 


3.2.1  Static  Threshold 


FIGURE  53  shows  the  data  recorded  in  establishing 
the  static  threshold  for  condition  1.  FIGURE  54  shows  the 
data  recorded  in  establishing  the  threshold  for  condition 
10.  Note  that  the  .1  Hz  ramp  input  is  slowly  increasing  with 
increasing  time.  The  threshold  value  is  determined  by  the 
first  input  amplitude  where  the  actuator  or  secondary  ram 
output  starts  to  respond  to  the  control  input.  Note  that 
the  high  frequency  noise  content  of  the  output  signals  is 
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FIGURE  53  Static  Threshold  - Condition  1 
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due  to  the  characteristics  of  the  output  position  LVDT 
and  the  demodulation  circuit  used  in  the  control  console, 
This  noise  is  primarily  made  up  of  a 400  Hz  frequency 
component,  obtained  from  the  demodulation  of  the  400  Hz 
LVDT  excitation  signal.  The  upper  edge  of  the  noise 
shows  the  actuator  or  secondary  ram  responding  to  the 
.1  Hz  input  ramp.  TABLE  3 shows  the  static  threshold 
measured  for  test  conditions  1 through  12. 


As  shown  in  TABLE  3,  the  static  threshold  value 
does  vary  for  the  different  test  conditions.  In  terms 
of  the  maximum  input  command  of  8.18  volts  peak,  the 
worst  threshold  is  .17  percent.  In  comparing  condi- 
tions 2,  3 and  4 with  the  baseline  condition  1,  it  is 
apparent  that  bias  off-sets  of  the  servo  amplifiers 
increase  the  threshold  by  approximately  a factor  of 
two  for  these  conditions.  For  condition  5,  with  Pi 
reduced  to  1500  psi,  the  threshold  reduced  slightly 
from  the  baseline  value  (perhaps  indicating  a decreas- 
ing driving  force  to  friction  ratio  with  increasing 
pressure  for  the  servo  actuator  pair  pressurized  by 
system  1) . 


The  test  conditions  6 and  7 (with  channel  1 and 
1+2  failed  respectively),  show  an  increase  in  thres- 
hold over  the  baseline  value.  This  was  not  expected, 
since  the  gain  changing  of  the  control  console  was  ex- 
pected to  keep  the  driving  force  to  error  signal  con- 
stant by  increasing  the  servo  amplifier  gains  of  the 
remaining  servo  amplifiers  after  failure  detection. 
However,  the  threshold  did  not  increase  as  much  as  for 
condition  8 where  Pi  was  adjusted  to  0 psi  (indicating 
that  the  gain  change  was  somewhat  effective).  Since 
there  was  no  automatic  gain  changing  for  condition  8, 
the  servo  actuator  driving  force  for  a given  error 
voltage  was  reduced  to  half  of  the  baseline  value. 
Condition  8 gave  the  largest  threshold  value  of  2.5% 
of  maximum  spool  stroke  input  voltage  or  .17%  of  max- 
imum input  voltage. 


Static  Threshold 


Input  Volts  ' % of  max  Input  °U  of 


Test 

Condition 


0.0036  0.022  .33 


0.0074  0.046  .67 


0.0050  0.031  .46 


0.0070  0.043  .64 


0.0022  0.014  .20 


0.0145  0.090  1.32 


0.0080  0.049  .73 


0.0275  0.170  2.50 


0.0035 


0.0095 


* 


TABLE  3 


Static  Threshold 
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For  the  secondary  ram  threshold  measurements  of 
conditions  10,  11  and  12,  only  presenting  the  measure- 
ments in  terms  of  maximum  spool  stroke  input  voltage 
is  applicable.  The  base  line  measurement  of  condi- 
tion 10  agrees  with  the  baseline  measurements  of  con- 
dition 1 in  terms  of  the  threshold.  This  implies  that 
the  static  threshold  characteristics  of  the  main  ram 
when  driven  by  the  secondary  ram  (control  valve)  were 
negligible.  With  channel  1 and  2 failed  (for  condi- 
tion 11),  the  threshold  increased,  due  to  the  reduc- 
tion in  servo  actuator  gain.  (Note  that  condition  11 
failed  electrical  channels  1 and  2 so  that  the  auto- 
matic gain  changing  was  prevented.)  For  ?2  failed 
(condition  12) , the  threshold  increased  over  the  base- 
line, although  not  as  much  as  with  condition  11. 


With  the  exception  of  conditions  6 and  8,  all  the 
threshold  values  remained  under  1 % in  terms  of  the  max- 
imum spool  stroke  input.  Typical  electro-hydraulic 
servo  valves  exhibit  threshold  of  . 5 % of  maximum  rate 
current  (equivalent  to  the  percent  rating  in  terms  of 
the  maximum  spool  stroke  input  voltage).  From  the 
measured  static  threshold  values  on  the  Parker-Hannif in 
mechanization  in  terms  of  spool  stroke,  the  Parker- 
Hannifin  control  valve  mechanization  is  quite  compara- 
ble to  a good  electro-hydraulic  valve. 


3.2.2 


Dynamic  Threshold 


FIGURE  53  shows  the  data  recorded  in  establishing 
the  dynamic  threshold  for  condition  1.  A 5 Hz  sine  wave 
input  was  used  to  drive  the  actuator.  This  frequency 
was  .5  of  the  bandpass  frequency  of  the  actuator.  Note 
on  FIGURE  55  that  with  increasing  time,  the  input  ampli- 
tude of  the  driving  frequency  was  gradually  increased. 

On  the  lower  trace,  the  start  of  the  actuator  response 
to  the  input  signal  is  quite  apparent.  Note  the  low 
frequency,  low  amplitude,  hunting  of  the  actuator  out- 
put when  not  responding  to  the  input  signal.  This 
characteristic  was  observed  throughout  the  testing. 
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FIGURE  55  Dynamic  Threshold  - Condition  1 
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According  to  Parker-Hannif in  personnel,  the  hunting  is 
due  to  the  coupling  linkage  compliance  between  the  out- 
put of  the  servo  actuator  pairs  and  the  normal  control 
spool  and  can  be  eliminated  by  increasing  the  stiffness 
of  the  linkage.  In  any  case,  the  hunting  was  of  the  order 
of  .003  inches  peak  to  peak  and  not  a large  amplitude 
compared  to  the  total  actuator  stroke.  FIGURE  56  shows 
the  data  recorded  in  establishing  the  dynamic  threshold 
for  condition  10. 


TABLE  4 shows  the  dynamic  threshold  measurements 
for  conditions  1 through  12.  In  comparison  to  the 
static  threshold,  the  dynamic  threshold  measured  some- 
what greater,  a result  which  would  normally  not  be 
anticipated.  For  the  baseline  (condition  1) , the  thres- 
hold increased  by  a factor  of  two  when  compared  to  the 
static  threshold.  One  possible  reason  ft-  the  threshold 
increase  is  that  the  flow  from  the  jet  pipes  required  to 
drive  the  servo  actuator  pairs'  oil  volume  compliance  at 
the  5 Hz  input  signal  degraded  the  dynamic  pressure  gain 
of  the  jet  pipe  slightly.  Since  the  baseline  threshold  of 
the  overall  actuator  (condition  1)  and  the  secondary  ram 
(condition  10)  were  identical,  the  threshold  appeared  en- 
tirely determined  by  the  secondary  ram  mechanization. 


For  the  input  offset  test  conditions  (conditions  2, 
3 and  4),  the  dynamic  threshold  increased  only  for 
condition  2.  For  conditions  3 and  4,  the  dynamic  thres- 
hold measured  approximately  two  thirds  of  the  base  line. 
The  fact  that  there  was  a measurable  change  at  all  from 
the  baseline  for  the  static  and  dynamic  threshold  is 
interesting,  since  w5 fh  the  series  coil  arrangement  all 
servo  actuators  receive  the  torque  motor  current  change 
and  shift  to  a slightly  different  position.  The  change 
of  threshold  may  indicate  that  the  servo  actuators  have 
running  positions  where  the  friction  levels  are  slightly 
lower  than  at  other  positions.  For  condition  5 with  P]^ 
reduced  to  1500  psi,  the  dynamic  threshold  increased 
over  the  baseline  value  by  about  507o  (as  contrasted  to 
the  decrease  in  static  threshold  when  compared  to  its 
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FIGURE  56  Dynamic  Threshold  - Condition  10 
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Dynamic  Threshold 

DYNAMIC  CONTROLS,  INC. 
Test  Data 


Date  Prepared:  12/6/76 


TEST  ITEM  - 


Parker  Hannifin  Fly-By-Wire 
Four  Channel  Tandem  Actuator 


TEST 


Test 

Condition 


- DYNAMIC  THRESHOLD 


Dynamic  Threshold 


iput  Volts 

/ 7o  of  max  Input 

7o  of  \ 

0.0075 

0.046 

.68 

0.0090 

0.056 

.82 

0.0055 

0.034 

.50 

0.0045 

0.028 

.41 

0.0110 

0.068 

1.00 

0.0045 

0.028 

.41 

0.0260 

0.160 

2.36 

0.0135 

0.083 

1.23 

0.0075 

0.0130 

0.0100 


baseline  value).  This  increase  is  consistent  with  the 
reduction  in  pressure  gain  for  the  servo  actuator  pair 
connected  to  P^.  For  the  condition  of  electrical  chan- 
nels 1 and  1+2  failed  (conditions  6 and  7),  the  thres- 
hold increased  over  the  baseline  value  despite  the  auto- 
matic gain  changing  associated  with  the  particular  fail- 
ure condition.  For  condition  8 (with  reduced  to 
0 psi)  , the  threshold  increased  817.  over  the  baseline 
value,  probably  due  to  the  reduced  driving  force  from 
the  P^  failure. 

For  the  secondary  ram  dynamic  threshold  measure- 
ments of  conditions  10,  11  and  12,  the  failure  condi- 
tions increase  the  threshold  over  the  baseline  measure- 
ments. The  threshold  worst  case  measurement  of  1.18% 
for  channels  1 and  2 electrically  failed  is  an  increase 
of  7470  over  the  baseline  value.  This  increase  is  con- 
sistent with  the  loss  of  channels  1 and  2 with  the  auto- 
matic gain  change  prevented.  However,  in  terms  of  the 
normal  electro-hydraulic  servo  value  threshold  of  . 570, 
the  dynamic  thresholds  for  the  mechanization  are  com- 
parable, both  for  the  baseline  and  for  failure  test  con- 
ditions . 


3.2.3  Frequency  Response 


FIGURE  57  for  condition  1 shows  the  test  data  re- 
corded for  the  condition  1 frequency  response  measure- 
ments. FIGURE  58  shows  the  frequency  response  data  re- 
corded for  the  baseline  secondary  actuator  response  of 
condition  10.  These  response  measurements  are  represen- 
tative in  terms  of  lack  of  peaking  and  the  roll-off 
slono<!  for  all  rnnrHHons  1 thrnuph  12.  Zero  db 

on  FIGURE  57  corresponds  to  an  output  amplitude  of  3% 
of  the  maximum  actuator  stroke.  Zero  db  on  FIGURE  58 
corresponds  to  a 50%  output  stroke  of  the  secondary 
ram  driving  the  control  valve.  These  input  test  ampli- 
tudes met  the  criteria  of  not  creating  output  waveform 
distortion  over  the  recorded  frequency  range  due  to 
threshold  or  saturation  effects. 
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TABLE  5 lists  the  frequency  response  for  conditions 
1 through  12  in  terms  of  the  frequencies  at  which  the  -90 
phase  angle  and  -3db  amplitude  ratio  point  occurred  for 
each  test  condition.  Note  that  for  conditions  1 through 
9,  the  actuator  response  remained  quite  constant,  with 
the  -90°  phase  lag  frequency  varying  from  only  8.4  to 
10.4  Hz.  Conditions  6 and  7 showed  the  greatest  change 
in  the  -90°  phase  angle  frequency.  This  was  probably 
due  to  the  automatic  gain  changing  over-compensating 
the  loop  gain  in  response  to  the  electrical  failures 
injected  for  these  test  conditions. 


For  the  secondary  ram  frequency  response  measure- 
ments, (conditions  10,  11  and  12)  the  response  increased 
slightly  with  condition  11.  No  frequency  response  de- 
gradation from  the  baseline  occurred  with  condition  12 
(P2  failed) , indicating  that  the  inertia  loading  of 
the  servo  actuators  by  the  summing  linkages  was  not 
great  enough  to  effect  the  frequency  responses. 


Distortion 


For  test  conditions  1 through  9 for  the  actuator, 
the  distortion  measurement  figures  were  quite  large 
(on  the  order  of  30%),  largely  due  to  the  400  Hz  noise 
included  in  the  demodulated  output  of  the  position  LVDT. 
Since  the  output  amplitude  was  run  at  3%  full  scale  (the 
same  as  used  for  the  frequency  response  measurements) 
the  noise  did  affect  the  distortion  readings  signifi- 
cantly. For  the  secondary  ram  distortion  measurements, 
the  output  amplitude  was  run  at  50%  full  scale  and  the 
distortion  components  of  the  output  waveform  due  to 
LVDT  noise  were  smaller.  Due  to  the  noise,  the  abso- 
lute value  of  the  distortion  readings  was  not  consider- 
ed valid  as  an  indicator  of  the  input-output  perform- 
ance and  the  change  in  distortion  from  the  baseline  mea- 
surements was  used  as  the  measurement  criteria.  (Since 
the  input  amplitude  was  not  changed  during  the  test  con- 
ditions and  the  test  frequencies  were  within  the  band- 
pass of  the  actuator,  the  output  waveform  amplitude  was 





TABLE  5 

Frequency  Response 

DYNAMIC  CONTROLS,  INC. 
Test  Data 


Date  Prepared:  12/6/76 


TEST  ITEM  - Parker-Hannifin  Fly-By-Wire 
Four  Channel  Tandem  Actuator 

TEST  - FREQUENCY  RESPONSE 


Test 

Condition 


Output  3%  Full  Scale  * 


- 3 db  Hz 


- 90°  Hz 


* Conditions  10,  11  and  12  @ 507.  full  scale. 





approximately  the  same  for  all  test  conditions  1 through 
9.  Because  the  relative  amount  of  400  Hz  noise  on  the 


output  waveform  did  not  change  for  the  different  test 
conditions  as  long  as  the  amplitude  remained  the  same, 
the  change  in  the  percent  distortion  figures  did  reflect 
changes  in  the  basic  waveform  of  the  output  at  the  test 
frequencies).  TABLE  6 lists  the  distortion  measurement 
results  for  test  conditions  1 through  12. 


For  the  main  ram  test  conditions  1 through  9,  all 
failure  conditions  reduced  the  output  distortion.  The 
greatest  reduction  in  the  percent  distortion  was  11.4 
percent  for  condition  5.  This  indicates  that  the  base- 
line actuator  configuration  had  at  least  11.4  percent 
harmonic  distortion  at  5 Hz.  Note  that  the  distortion 
at  10  Hz  was  not  reduced  as  much  as  at  5 Hz  for  the  test 
conditions  1 through  9. 

For  the  test  conditions  10,  11  and  12,  the  output 
distortion  both  increased  and  decreased  from  the  base- 
line value  of  3.27,  at  both  the  5 and  10  Hz  frequencies. 
The  largest  increase  occurred  with  condition  11  and  was 
an  increase  of  1.37,  distortion.  These  distortion  values 
are  quite  low  both  for  the  baseline  and  for  the  two  fail- 
ure conditions  ( Note  that  it  is  difficult  to  detect  vi- 
sually a harmonic  distortion  of  less  than  57,  on  a sinu- 
soidal signal) . The  difference  between  the  main  ram 
and  secondary  ram  distortions  indicates  that  the  most 
of  the  distortion  measured  on  the  output  of  the  main 
ram  was  associated  with  the  main  ram  components,  and 
not  the  secondary  ram  (control  valve)  motion. 


FIGURE  59  shows  the  data  recorded  for  measuring 
the  hysteresis  for  the  baseline  actuator  (condition  1). 
FIGURE  60  shows  the  data  recorded  in  measuring  the 
hysteresis  for  the  secondary  ram  baseline  (condition  10). 


TABLE  6 


Distortion 


DYNAMIC  CONTROLS,  INC. 
Test  Data 


Date  Prepared:  12/6/76 


TEST  ITEM  - Parker-Hannifin  Fly-By-Wire 
Four  Channel  Tandem  Actuator 

TEST  - DISTORTION 


Condition  I Change  of  7.  distortion  from  baseline  value 


7„  @ 5 Hz 


Baseline  Value* 


7.  @ 10  Hz 


Baseline  Value** 


Baseline  Value*** 


+ 0.8 


- 1.0 


* 30.87.,  **  30.37.,  ***  3.27.,  ****  3.27. 


Baseline  Value**** 


+ 0.1 
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These  plots  are  representative  of  the  main  ram  and 
secondary  hysteresis  plots  respectively.  On  FIGURE  59 
note  that  actuator  output  motion  with  a gradually 
increasing  and  decreasing  input  signal  does  not  des- 
cribe the  conventional  hysteresis  loop.  The  increas- 
ing and  decreasing  direction  motions  actually  cross 
each  other.  This  apparently  was  due  to  the  random 
hunting  of  the  actuator  output  motion  (previously  men- 
tioned in  Section  3.2.2)  acting  effectively  as  a dither 
input  to  reduce  the  hysteresis. 


As  shown  in  TABLE  7 , this  hunting  made  the  ap- 
parent hysteresis  of  the  actuator  very  low.  The  hys- 
teresis for  the  secondary  ram  as  shown  in  FIGURE  60 
was  of  a conventional  appearance.  In  terms  of  maximum 
control  valve  stroke,  the  secondary  ram  hysteresis  was 
a maximum  of  10%.  This  is  approximately  3 times  the 
hysteresis  of  a typical  electro-hydraulic  servo  valve. 
If  the  main  ram  had  not  exhibited  the  hunting  charac- 
teristics, it  is  expected  that  the  hysteresis  of  the 
total  actuator  in  terms  of  the  maximum  spool  stroke 
would  be  only  slightly  greater  than  the  secondary  ram 
measurement.  In  terms  of  the  long  stroke  of  the  power 
actuator,  the  percent  hysteresis  with  or  without 
hunting  would  be  less  than  1%. 


3.2.6  Saturation  Velocity 


L 


FIGURE  61  shows  the  actual  data  recorded  in  de- 
termining the  extend  saturated  rate  for  test  condi- 
tion 1 (main  ram  baseline) . FIGURE  62  shows  the  data  re- 
corded in  determining  the  extend  and  retract  saturated 
rate  for  test  condition  10.  TABLE  8 lists  the  extend 
and  retract  saturated  velocities  for  test  conditions  1 


through  12.  The  baseline  main  ram  rates  met  the  nominal 
9 inches  per  second  specified  by  Parker-Hannif in  for  the 
actuator.  With  the  exception  of  test  conditions  5 and  7, 
the  main  ram  maintained  the  baseline  extend  and  retract 
rates  for  test  conditions  2 through  8.  Test  condition  5 
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TABLE  7 
Hysteresis 

DYNAMIC  CONTROLS,  INC. 
Test  Data 


Date  Prepared:  12/6/76 


TEST  ITEM  - Parker  Hannifin  Fly-By-Wire 
Four  Channel  Tandem  Actuator 


TEST 


HYSTERESIS 


Test 

Condition 


7o  lull  Scale 


"A  or  av  max 


0.047 


, 71 


0.065 


,68 


0.054 


,62 


0.065 


74 


0.065 


74 


0.043 


.49 


0.016 


18 


8 


0.081 


.92 


DYNAMIC  CONTROLS,  INC. 

Test  Data 

Date 

TEST  ITEM  - Parker  Hannifin  Fly-By-Wire  Prepared:  12/7/76 
Four  Channel  Tandem  Actuator 


TEST  - Saturation  Velocity  - Condition  10 


Maximum  Amplitude  Step  Input 


FIGURE  62  Saturation  Velocity  - Condition  10 


TABLE  8 

Saturation  Velocity 

DYNAMIC  CONTROLS,  INC. 
Test  Data 


Date  Prepared:  12/6/76 


TEST  ITEM  - 


Parker-Hannifin  Fly-By-Wire 
Four  Channel  Tandem  Actuator 


TEST 


est 
Condition 


- SATURATION  VELOCITY 


Cvt*Dn/l  — -in  /< 


Rpt-rapt  - in. /sec. 


Failed  when  step  was  applied 


12.19 


11.40 


11.49 


11.84 
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shows  a reduction  of  approximately  1 inch/second  for 
both  the  extend  and  retract  motions.  This  reduction 
may  be  associated  with  that  half  of  the  actuator  ram 
connected  to  ?2  loading  the  other  half  of  the  actuator 
during  maximum  rate  motions.  Condition  7 shows  a re- 
duction in  the  extend  rate.  This  probably  was  due  to 
servo  amplifier  saturation  not  driving  the  control 
valve  to  the  same  maximum  position  as  with  the  base- 
line test  condition  1.  (Condition  7 causes  the  two 
servo  amplifiers  that  are  operational  to  provide  all 
the  current  to  the  four  torque  motors). 


For  test  conditions  11  and  12,  the  secondary  ram 
extend  and  retract  rates  did  not  change  significantly 
from  the  baseline  condition  10.  The  retract  motion 
saturated  velocity  for  condition  11  was  reduced  slightly 
from  the  baseline  test  condition  10,  perhaps  due  to  the 
servo  amplifier  or  jet  pipe  servo  valve  saturation 
characteristic . 


3.2.7 


Linearity 


FIGURE  63  shows  the  actuator  output  linearity 
measured  for  conditions  1 through  9.  The  data  shown 
was  recorded  for  condition  1.  The  recorded  results  for 
conditions  2 through  9 were  essentially  identical  to 
the  condition  1 results  and  in  order  to  avoid  repetition, 
are  not  shown  separately.  Notice  that  there  is  no  appar- 
ent hysteresis  shown  on  the  linearity  plot.  As  previously 
mentioned,  the  very  low  amplitude  hunting  of  the  actua- 
tor effectively  eliminates  the  apparent  hysteresis  in  the 
main  ram  motion.  The  lack  of  linearity  change  with  the 
different  conditions  is  expected,  since  the  position 
linearity  of  the  actuator  depended  only  on  the  feedback 


k.JLUUOUUWUi.  uotu  WAUU  L.UC  aC  LUQUUI 


r U4  snows  Lne 


secondary  ram  baseline  linearity  (Condition  10).  A very 
slight  deviation  from  a straight  line  exists  between  0 
and  .2  volts  input  (0  and  .6  volts  output).  This  is  no 
greater  than  expected  with  a normal  servovalve.  Note  the 


I 
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Linearity  - Conditions  1 through  9 


hysteresis  loop  which  agrees  with  the  results  of  the 
hysteresis  testing.  Conditicn  11  (FIGURE  65)  with 
channels  1 and  2 failed  by  pulling  a relay,  shows  a 
gain  change  from  the  base  condition  10.  This  gain 
change  is  to  be  expected,  since  the  method  of  fail- 
ing channels  1 and  2 eliminated  the  automatic  gain 
changing  circuitry  of  the  control  console.  Condition 
12  (FIGURE  66),  with  P2  failed,  shows  the  same  linear- 
ity and  hysteresis  as  condition  10.  Since  the  linear- 
ity of  the  secondary  ram  is  determined  by  the  mechanical 
feedback  from  the  servo-actuator  pistons  to  their  respec- 
tive torque  motors,  little  change  with  failure  conditions 
would  be  expected.  This  result  is  confirmed  by  the 
recorded  data. 


FIGURE  67  shows  the  step  response  data  for  test 
conditions  1 through  4.  The  data  shown  was  recorded 
for  condition  1.  Conditions  2,  3 and  4 gave  identical 
step  response  measurements.  Two  levels  of  step  inputs 
were  used  to  measure  the  main  ram  response,  corres- 
ponding to  170  and  37,  of  full  output.  FIGURE  67  shows 
both  the  input  step  and  the  actuator  response.  The 
slight  slope  of  the  leading  edge  of  the  step  input 
trace  is  due  to  the  response  characteristics  of  the 
Brush  recorder.  Note  that  the  step  response  to  the 
1%  and  3%  input  both  exhibit  the  same  12.5  millisecond 
time  delay  and  a 30  millisecond  total  response  time  to 
reach  2/3  of  the  final  value.  The  time  delay  is  due 
to  the  actuator  dynamics  being  a higher  order  than  a 
second  order  system.  The  response  of  the  main  ram 
after  the  time  delay  resembles  a second  order  system 
step  response  with  a damping  ratio  of  .5.  As  shown 
on  FIGURE  67,  the  extend  and  retract  direction  responses 
are  identical.  Note  that  the  17.  full  scale  oucpuc 
step  response  shows  the  low  amplitude  actuator  hunting 
characteristics  previously  observed. 
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Conditions  2,  3 and  4 did  not  exhibit  any  change 
from  the  baseline  response.  The  offset  currents  for 
these  test  conditions  did  not  cause  amplifier  saturation 
for  the  size  of  input  used  for  the  step  response  measure- 
ments and  all  servo  actuator  torque  motors  receive  the  same 
offset  current.  No  change  in  the  dynamic  response  would 
be  expected  for  these  test  conditions. 


The  step  response  for  condition  5 as  shown  in 
FIGURE  68,  resembles  the  baseline  response  for  con- 
dition 1.  The  response  time  (34  milliseconds)  and  damp 
ing  ratio  (.6)  are  slightly  greater  than  the  values  for 
condition  1.  This  is  probably  caused  by  the  half  of 
the  actuator  connected  to  P]^  acting  as  slight  load  (pro 
portionai  to  rate)  for  the  atlualui  half  supplied  by 


For  condition  6 (channel  1 failed  electrically) 
the  damping  ratio  increased  over  condition  1 to  .6. 

The  time  delay  and  rise  time  were  identical  to  the 
baseline  condition  1 test  results.  FIGURE  69  illus- 
trates the  response  results  for  this  test  condition. 
FIGURE  70  shows  the  test  results  for  condition  7,  with 
both  channels  1 and  2 failed  electrically.  The  damp- 
ing ratio  is  the  only  apparent  change  from  the  base- 
line test  results.  For  condition  8,  the  damping  ratio 
is  .8  as  compared  to  .5  for  the  baseline  condition  1. 
The  change  in  the  damping  ratio  for  conditions  6 and  7 
are  probably  due  to  the  change  in  the  amplifier  gains 
due  to  the  automatic  gain  changing  incorporated  into 
the  control  console.  The  response  of  condition  9 was 
similar  to  that  of  condition  1 with  an  apparent  damping 
ratio  increase  to  .7. 


The  steD  response  for  the  secondary  ram  was  measured 
at  507,  full  scale  output  for  the  secondary  ram.  As 
shown  in  FIGURE  71,  the  step  response  exhibited  no  time 
delay  and  appears  as  a true  second  order  system.  As 
shown  in  FIGURE  71,  the  response  of  the  secondary  ram 
for  condition  10  (baseline)  exhibited  a rise  time  of 
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FIGURE  71  Step  Response  - Condition  10 
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15  milliseconds  and  a damping  ratio  of  .6.  The  extend  and 
retract  responses  are  identical.  Conditions  11  and  12 
resembled  the  condition  10  response  results  and  had  the 
same  damping  ratio  and  rise  time. 


As  with  the  frequency  response  measurements,  little 
change  in  the  dynamic  response  was  apparent  with  the 
test  condition  changes.  The  damping  ratios  demonstrated 
by  the  step  response  measurements  indicated  that  the 
response  of  the  actuator  was  adjusted  to  have  the 
characteristic  of  a minimum  rise  time  with  no  ringing. 


3.2.9 


Failure  Transients 


3. 2. 9. 1 General 


Test  conditions  13  through  31  were  used  to  establish 
the  failure  transient  characteristics  of  the  main  and 
secondary  ram.  The  test  results  and  test  conditions  are 
arranged  in  the  following  order: 


Test 

Test 

Conditions 

Electrical  Input  Loss  - 
Main  Ram  Transient 

13, 

14,  15 

Electrical  Hardover  Input  - 
Main  Ram  Transient 

16, 

17,  18,  19 

Slowover  Electrical  Input  - 
Main  Ram  Transient 

20, 

21 

Hydraulic  Failure  - 
Main  Ram  Transient 

22, 

23,  24 

Electrical  Input  Loss  - 
Secondary  Ram  Transient 

25, 

26,  27 

Test  Conditions 

Electrical  Hardover  Input  - 28,  29,  30,  31 

Secondary  Ram  Transient 

The  test  results  in  the  following  sub-sections  are 
presented  as  lisced  above. 

3 . 2 . 9 . 2 Electrical  Input  Loss  - Main  Ram  Transient 


FIGURE  72  shows  the  effect  of  a sequential  channel  1 
and  channel  2 input  loss  On  the  main  ram  motion.  The  input 
signal  to  the  actuator  is  a 37°  full  scale  input  at  approxi- 
mately 1 Hz.  Note  that  because  of  space  limitations, 
on  FIGURE  only  four  channels  of  recorded  information 
are  presented.  The  top  two  channels  of  data  are  record- 
ings of  the  inputs  to  channels  1 and  2 of  the  actuator. 

The  third  channel  of  recorded  data  is  the  actuator  out- 
put. The  fourth  and  bottom  channel  of  recorded  data  is 
the  output  voltages  used  to  drive  the  failure  indicating 
lights.  For  this  test  condition,  both  channels  3 and  4 
of  the  actuator  continue  to  receive  the  1 Hz  input  signal. 
For  the  failure  of  channel  1 input,  there  is  a distinct 
time  delay  between  the  loss  of  channel  1 input  and  the 
detection  of  the  failure  (as  indicated  by  tue  F^  driving 
light  voltage).  For  the  particular  input  amplitude  and 
frequency  used,  the  time  delay  between  the  input  loss 
and  transfer  out  of  the  failed  channel  was  .8  seconds. 

The  waveform  shows  a transient  upon  the  loss  of  input  sig- 
nal 1 and  upon  the  failure  transfer.  Note  that  for  the 
.8  seconds  until  failure  transfer,  the  amplitude  of  the 
actuator  motion  is  attenuated  slightly.  Upon  failure 
transfer,  the  amplitude  of  output  motion  is  increased  to 
the  "no  failure"  value. 


For  the  second  channel  failure,  the  time  delay  for 
the  failure  transfer  to  occur  is  approximately  .15 
seconds.  The  time  delay  for  both  the  first  and  second 


* 


Test 


159 


DYNAMIC  CONTROLS,  INC 
Test  Data 


Date 

Prepared:  12/7/76 


TEST  ITEM  - Parker  Hannifin  Fly-By-Wire 
Four  Channel  Tandem  Actuator 


TEST 


Condition  13 


34  Full  Scale  Output 
1.0  Hz  Sine  Wave 


CH#1 

Input 


Scale: 

Inputs 

X _ 
out 

Fail  Ind- 


.02  v/div 

.0079  in/div 
1.0  v/div 
10  div/sec 


CH#2 

Input 


FIGURE  72  Failure  Transients  - Condition  13 


Iteaitiwwci^aM^^  ?*■  V*vvt 


i 


failures  is  determined  by  the  control  console  logic 
design.  The  main  ram  transient  appears  to  be  less 
than  .039  inches  for  the  first  failure  and  less  than 
.094  inches  for  the  second  failure.  For  both  failures, 
the  transient  consists  of  a short  duration  loss  of 
the  correct  output  amplitude. 


FIGURE  73  shows  the  effect  of  a sequential  loss 
of  channel  3 and  4 inputs  on  the  main  ram  output  motion. 
Inputs  to  channels  1 and  2 were  already  grounded  for 
this  test  (test  condition  14).  As  with  test  condition 
13,  the  input  to  the  actuator  control  channels  is  a 3% 
full  scale  input  at  approximately  1 Hz.  The  time  delay 
between  loss  of  channel  3 input  and  failure  transfer  was 
.25  seconds.  The  failure  transient  at  the  end  of  the  .25 
second  delay  appears  as  an  apparent  loss  of  output  res- 
ponse to  the  input  signal.  The  actuator  centered  after 
the  third  failure  input  loss  (channel  3) . The  channel  4 
input  loss  had  no  effect  on  the  actuator  output  since  the 
actuator  had  reverted  to  the  manual  input  valve  when  the 
channel  3 input  was  grounded. 


FIGURE  74  shows  the  failure  transient  results  for 
test  condition  15  with  channel  1 and  channel  2 inputs 
grounded  simultaneously.  The  simultaneous  input  failures 
are  detected  correctly  as  failures.  Since  the  control 
console  logic  compared  all  other  channels'  error  voltages 
against  channel  4's  error  voltage,  whether  channels  1 and  2 
failed  sequentially  or  simultaneously  made  no  difference 
to  the  failure  detection.  If  the  control  logic  used  a 
true  inter-channel  voting  of  error  voltages  for  failure 
detection,  the  simultaneous  failures  of  two  inputs  would 
not  be  detected  as  failures.  The  time  delay  between  fail- 
ure and  failure  transfer  was  approximately  .4  seconds. 

The  failure  transient  was  due  to  the  loss  of  output  ampli- 
tude response  to  the  input  during  the  .4  second  delay. 

The  maximum  amp'Mt'ude  loss  was  .071  inches.  In  terms  of 
the  maximum  actuator  stroke  of  +2.9  inches,  the  maximum 
actuator  transient  deviation  for  an  input  loss  occurred 
with  the  second  channel  input  failure.  For  this  failure, 
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the  amplitude  deviation  was  1.62%  of  the  5.8  inch  total 
stroke . 


3. 2. 9. 3 Electrical  Hardover  Input  - Main  Ram  Transient 

» 

FIGURES  75  through  78  show  the  failure  transients 
resulting  from  a hardover  input  applied  to  the  control 
channel  inputs.  These  are  the  results  recorded  and  are 
not  consistent  with  the  expected  results  or  test  results 
previously  obtained  by  Parker-Hannif in  in  testing  (and 
provided  in  reference  test  data  provided  with  the  actua- 
tor) . The  apparent  results  of  the  hardover  input  shows 
the  main  ram  shifting  approximately  .003  inches  until 
the  failure  is  detected  and  the  channel  transferred  out. 
After  the  time  delay  (which  remains  between  .06  and  .09 
seconds  for  all  four  test  conditions),  the  actuator  moved 
to  a new  position.  This  position  was  within  .031  inches 
from  the  position  before  the  hardover  input  was  applied. 
This  was  not  the  expected  effect  of  applying  hardovers 
to  the  mechanization  and  is  not  considered  valid  data. 
(Unfortunately,  at  the  time  this  data  was  analyzed  in 
depth,  the  actuator  was  no  longer  available  for  running  a 
retest  of  these  four  test  conditions) 

f i 

~ Normally  for  a hardover  applied  to  one  channel  of 

! - the  mechanization,  the  actuator  integrates  off  in  response 

to  the  hardover  input.  This  motion  continues  until  either 
the  failure  logic  detects  the  failure  and  transfers  out 
the  channel  or  the  actuator  moves  to  a position  where 
the  feedback  voltage  generates  a sufficient  error  voltage 
in  the  other  channels  to  offset  the  hardover  input  and  null 
the  control  valve. 


FIGURE  79  shows  the  expected  type  of  response  to  the 
hardover  input  and  is  representative  ot  actuator  data 
recorded  by  Parker-Hannif in  during  their  testing.  The 
figure  shows  the  hardover  input,  control  valve  and  actua- 
tor position  motions  both  with  failure  removal  and  without 
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failure  removal.  For  the  distribution  of  loop  gains  and 
saturation  levels  provided  in  the  Parker-Hannif in  elec- 
tronics, the  maximum  deviation  due  to  the  first  failure 
hardover  without  failure  detection  would  be  approximately 
.200  inches.  This  displacement  would  be  reduced  by  the 
transfer  of  control  with  the  amount  of  reduction  depend- 
ing on  the  particular  time  delay  of  the  failure  logic. 

Since  the  Parker-Hannif in  logic  mechanization  incorporates 
a gain  changing  circuit  in  the  failure  logic,  second  hard- 
over  failure  inputs  would  cause  approximately  the  same 
deviation  as  the  first  hardover  failure  input.  Without 
the  automatic  gain  changing,  the  actuator  offset  deviation 
to  the  second  hardover  input  would  increase  (due  to  the 
feedback  signal  canceling  the  error) . This  is  because 
with  each  channel  failure,  there  are  fewer  remaining  chan- 
nels to  collectively  fight  the  failed  channel.  Notice  on 
FIGURE  the  control  valve  initially  moves  to  a new  posi- 
tion in  response  to  the  hardover  input  and  then  gradually 
returns  towards  null  in  response  to  the  other  control  chan- 
nels trying  to  offset  the  hardover  input  as  the  actuator 
ram  moves.  This  limiting  characteristic  to  hardover  fail- 
ures is  typical  of  an  output  sharing  redundancy  mechanization. 

3. 2. 9.4  Slowover  Electrical  Input  - Main  Ram  Transient 

FIGURES  80  and  81  show  the  effect  of  a slowly  increas- 
ing input  applied  to  one  channel's  input  with  the  remain- 
ing channels  grounded.  Although  the  FIGURES  80  and  81 
show  the  effect  of  the  slowover  being  applied  to  channel 
l's  input,  the  transfer  characteristics  were  identical 
for  ramp  inputs  into  other  control  channels.  The  general 
effect  of  the  slowover  is  that  when  the  particular  trip 
level  of  the  failure  logic  is  reached,  the  channel  with 
the  slowover  input  is  transferred  out.  Until  the  transfer 
occurs,  the  actuator  responds  to  the  slowover  input.  Upon 
transfer,  the  actuator  returns  to  the  null  or  zero  input 
position.  After  failure  transfer  is  indicated  by  the 
fail  indicate  voltage  change  there  is  a .025  second  per- 
iod of  time  where  the  actuator  moves  erratically  before 
starting  to  return  smoothly  to  a null  position.  This 
motion  is  probably  associated  with  the  operation  of  the 
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failure  removal  and  gain  changing  relays  used  in  the 
failure  detection  logic  of  the  control  console.  Note 
that  FIGURE  80  shows  the  extend  motion  of  the  actuator 
and  FIGURE  81  shows  the  retract  motion.  The  transient 
for  both  motions  is  a simple  return  to  a null  condition 
with  the  deviation  from  null  determined  by  the  failure 
logic  detection  settings. 


3. 2. 9. 5 Hydraulic  Failure  - Main  Ram  Transient 


FIGURE  82  shows  the  effect  of  a degradation  of 
supply  pressure  on  the  output  of  the  main  ram,  with 
all  electrical  inputs  to  the  actuator  grounded.  A 
very  slight  deviation  of  the  actuator  output  (on  the 
order  of  .008  inches)  occurs  at  the  point  where 
dropped  to  1000  psi.  FIGURE  83  shows  the  failure 
transient  results  for  test  condition  23.  The  test 
result  shows  that  there  is  no  apparent  output  change 
of  the  main  ram  while  operating  at  the  5 Hz  frequency 
when  Pi  fails.  Note  that  the  tra r . r the  P^  and 

?2  pressures  reflect  the  line  pre  variations  due 

to  the  actuator  cycling.  FIGURE  84  ior  test  condition 
24  shows  the  effect  on  the  actuator  output  of  two 
failures  of  supply  pressure.  With  the  failure  of  P^ 

(P2  already  failed)  the  output  of  the  actuator  simply  stops 
moving.  The  failure  effects  demonstrated  by  these  test 
conditions  (22,  23,  24)  were  consistent  with  the  results 
anticipated  in  reviewing  the  design  of  the  mechanization. 


9.6  Electrical  Input  Loss  - Secondary  Ram  Transient 


FIGURES  85,  86  and  87  show  the  effect  of  an  input 
loss  on  the  secondary  ram  motion  for  the  test  conditions 
25,  26  and  27  respectively.  As  shown  on  FIGURE  85,  there 
is  a time  delay  between  loss  of  each  input  channel  and  the 
failure  transfer.  For  the  channel  1 input  loss,  the  time 
delay  before  transfer  was  2.1  seconds.  For  the  channel  2 
input  loss,  the  time  delay  was  .8  seconds.  The  failure 
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transient  occurring  on  the  output  motion  of  the  secondary 
ram  was  due  to  a loss  of  response  amplitude  during  the 
time  delay  period.  Note  that  after  two  failures,  the 
top  of  the  sinusoidal  motion  of  the  secondary  ram  shows 
some  saturation  characteristics.  FIGURE  86  shows  the 
effect  of  the  third  input  loss  on  the  output  motion  of  the 
secondary  ram.  After  a time  delay  of  .4  seconds,  the  main 
ram  is  disconnected  from  electrical  input  control. 

FIGURE  87  shows  the  effect  of  two  simultaneous  input 
losses  on  the  secondary  ram  motion.  After  a time  delay 
of  1.2  seconds,  the  failed  channels  are  transferred  out 
and  the  automatic  gain  changing  corrects  for  the  ampli- 
tude loss  during  the  time  delay.  The  failure  transient 
amplitude  is  the  amplitude  loss  during  the  time  delay 
period.  Notice  the  waveform  distortion  after  the  failures. 
This  waveform  distortion  may  be  caused  by  saturation  of 
the  servo-amplifiers  due  to  the  automatic  gain  changing 
incorporated  in  the  control  console  failure  logic.  The 
distortion  was  not  reflected  in  the  distortion  measurements 
for  test  condition  11  since  the  failure  of  channels  1 and 
2 by  pulling  a relay  eliminated  the  gain  changing.  The 
asymetrical  saturation  should  be  easily  adjusted  out  in 
the  servo-amplifier  electronics. 


3. 2.9.7  Electrical  Hardover  Input  - Secondary  Ram  Transient 


FIGURE  88  shows  the  secondary  ram  failure  transient 
caused  by  a hardover  electrical  input  into  channel  1 
(test  condition  28).  As  shown  on  FIGURE  88,  the  secondary 
ram  moves  to  a position  .037  inches  from  the  grounded 
input  position  within  .025  seconds.  This  position  is  held 
for  .040  seconds  when  the  failure  logic  transfers  channel 
1 out.  The  secondary  ram  then  moves  towards  the  grounded 
input  position  and  within  .030  seconds  takes  up  a new  null 
position,  .007  inches  displaced  from  the  original  null 
position.  The  null  offset  after  failure  reflects  the  mis- 
match between  servo -amplifier  outputs  after  the  automatic 
gain  changer  operates.  The  .037  inch  movement  before 


failure  detection  is  50 % of  the  maximum  control  valve  stroke 
in  one  direction  and  indicates  that  one  servo-amplifier’s 
output  current  is  sufficient  to  stroke  the  control  spool 
to  50%  of  its  maximum  stroke. 


FIGURE  89  shows  the  effect  on  the  secondary  ram  motion 
of  a hardover  electrical  input  into  channel  2 after  channel 
1 has  been  failed  and  transferred  out  (test  condition  29). 
The  movement  of  the  secondary  ram  is  similar  to  the  channel 
1 test  result  with  a displacement  change  of  .035  inches 
and  a .035  second  additional  delay  before  transfer.  The 
secondary  ram  returns  to  a new  null  position  after  the 
failure  removal. 


FIGURE  90  shows  the  effect  on  the  secondary  r motion 
of  a hardover  electrical  input  into  channel  3 after  channels 
1 and  2 have  been  failed.  A displacement  change  of  .022 
inches  occurs  during  the  time  delay  before  transfer.  The 
time  delay  between  application  of  the  hardover  and  trans- 
fer is  .085  seconds.  After  failure  transfer,  the  actua- 
tor moves  towards  a null  position  and  then  drifts  off, 
indicating  that  the  failure  logic  has  operated  the 
solenoid  shutoff  valves  and  depressurized  the  secondary 
ram  hydraulics. 

FIGURE  91  shows  the  effect  on  the  secondary  ram  motion 
of  two  simultaneous  hardover  electrical  inputs.  Since  all 
channels  are  referenced  to  channel  4,  the  failure  logic 
detects  the  hardovers  as  failures.  The  secondary  ram 
motion  before  transfer  is  .066  inches.  Both  inputs  are 
transferred  out  within  .065  seconds  after  application  of 
the  hardover  input.  The  secondary  ram  returns  to  a null 
position  .015  inches  from  the  "no  failure"  null  position. 

The  test  results  obtained  for  the  hardover  input 
effect  on  the  secondary  ram  motion  are  as  expected  from 
reviewing  the  mechanization  design.  For  all  single  hard- 
over  failure  inputs,  the  secondary  ram  moved  to  a new 
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position  of  approximately  50%  of  the  peak  stroke  within 
.025  seconds.  After  a time  delay  of  .065  to  .085  seconds 
after  application  of  the  hardover,  the  failure  logic 
transfers  out  the  failed  channel  and  the  secondary  ram 
either  returned  to  a null  position  or  was  depressurized. 


3.2.10 


Failure  Logic  Detection  Characteristics 


TABLE  9 lists  the  voltage  input  level  applied  to  each 
input  to  initiate  a channel  failure.  These  voltages  re- 
late to  +8.18  volts  input  for  full  actuator  stroke  and 
+.550  volts  input  for  full  control  valve  stroke.  Note  that 
the  .340  volts  trip  level  is  617o  of  the  input  voltage  for 
maximum  valve  stroke.  The  channel  4 trip  level  voltages 
are  not  listed  since  this  was  the  reference  channel  (the 
channel  4 trip  levels  failed  the  other  three  channels  at 
the  same  level  as  varying  the  inputs  to  those  channels). 


FIGURE  92  shows  the  trip  level  as  a function  of  fre- 
quency for  channels  1 and  2.  Note  that  a .1  Hz,  the  trip 
level  is  approximately  the  static  trip  level  indicated  in 
TABLE  9 . Although  not  shown  on  the  figure,  at  8 Hz 
for  channel  1 and  10  Hz  for  channel  2,  no  failure  trip 
was  encountered  up  to  the  maximum  input  level  of  +8.18 
volts. 


Both  the  static  trip  levels  and  dynamic  trip  levels 
were  measured  with  the  actuator  system  fully  powered. 


Date 

Prepared:  12/6/76 


i ; 


Test  A - Input  Voltage  to  each  Channel  (other  channel 
Inputs  grounded)  that  initiates  a failure 
detection 

CH  #1  CH  #2  CH  #3  CH  #4 

+340  mv  +350  mv  +320  mv  Reference 
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FIGURE  92  Dynamic  Trip  Level 


4.0  RESULTS  SUMMARY  AND  CONCLUSIONS 


4.1  General 

The  actuator  worked  as  intended  in  terms  of  redun- 
dancy in  as  much  as  it: 

1.  Provided  single  fail  operate  redundancy 
for  servo  valve  and  hydraulic  power  sup- 
ply failures. 

2.  Provided  dual  fail  operate  redundancy  for 
electrical  inputs. 


As  described  previously,  only  the  actuator  portion 
of  the  mechanization  was  considered  by  Parker- Hannifin 
to  be  representative  of  flight  type  hardware.  The  elec- 
tronic logic  provided  to  work  with  the  actuator  was  de- 
signed to  only  indicate  principle  of  operation.  The 
comments  made  in  the  following  subsection  should  there- 
fore be  viewed  in  light  of  the  two  different  design  ob- 
jectives . 


4.2  Specific 


4.2.1  Main  Ram  Tests 


The  nominal  performance  of  the  actuator  in  terms 
of  frequency  response,  threshold,  hysteresis  and  linear- 
ity appeared  consistent  with  non-redundant  electrohy- 
draulic  actuators.  The  frequency  response  of  the  actua- 
tor was  essentially  flat  to  approximately  10  Hz  and  ap- 
peared as  a well  damped  high  order  system.  The  values 
of  the  apparent  hysteresis  and  threshold  were  decreased 
by  the  low  amplitude  hunting  of  the  actuator  output  which 
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acted  as  a dither  to  the  actuator.  Without  the  hunting, 
which  apparently  could  be  eliminated  by  stiffening  a con- 
trol link  (according  to  Parker-Hannif in) , the  measured 
threshold  and  hysteresis  would  be  greater  than  those 
recorded  during  this  test  series.  The  measured  values 
for  the  hysteresis  and  threshold  for  the  total  actuator 
were  attributable  entirely  to  the  secondary  actuator. 


The  nominal  saturation  velocities  for  the  main  ram 
agreed  with  the  design  values  provided  by  Parker-Hanni- 
fin.  The  absolute  harmonic  distortion  measurements  for 
the  main  ram  motion  were  obscured  by  the  amount  of  car- 
rier signal  in  the  main  ram  motion  signal.  Only  relative 
values  for  the  various  operating  conditions  were  recorded. 


The  changes  in  the  performance  characteristics  with 
the  different  failure  modes  and  test  conditions  were  meas- 
urable, but  in  most  cases,  of  minor  significance.  The 
static  threshold  varied  from  .022%  to  .170%  of  maximum 
input  from  the  baseline  to  the  worst  condition.  The  dy- 
namic threshold  varied  from  .046%  to  .16%  of  maximum  in- 
put from  the  baseline  to  the  worst  test  condition.  The 
frequency  response  did  vary  from  the  baseline  measurement, 
in  part  due  to  over-compensation  by  the  automatic  gain 
changer  incorporated  in  the  control  console  electronics. 

The  variation  in  the  -3db  frequency  was  41%  compared  to 
the  baseline.  The  variation  in  the  -90°  phase  lag  frequency 
was  32%  compared  to  the  baseline.  The  variation  was  es- 
sentially an  increase  in  response,  rather  than  a degrada- 
tion. The  distortion  varied  with  the  test  conditions. 

The  worst  change  in  the  output  harmonic  distortion  was 
a change  of  11.4  percent  distortion.  The  apparent  hyster- 
esis increased  727.  from  the  baseline  value  for  the  worst 
condition.  However,  since  the  hysteresis  was  less  than 
,17o  for  full  scale  for  all  test  conditions,  the  change 
is  of  minor  significance. 


The  results  of  the  output  transient  testing  for  the 
effect  of  the  failure  removal  was  influenced  by  the  design 
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of  the  control  logic.  The  logic  was  set  for  input  error 
detection  corresponding  to  approximately  507„  of  the  maxi- 
mum servo  amplifier  current.  This  is  a typical  value 
for  error  detecting  failure  logic  mechanizations  and  is 
probably  representative  of  any  logic  mechanization  that 
would  be  used  with  the  actuator.  In  terms  of  failure 
transient  for  input  loss  while  driving  with  a sinusoidal 
signal,  the  amount  of  the  transient  was  directly  deter- 
mined by  the  time  delay  circuit  incorporated  in  the  con- 
trol logic.  Since  an  RC  charging  circuit  was  used  to 
create  the  time  delay,  the  delay  time  varied  with  the 
amplitude  of  the  error  signal  applied  to  the  RC  circuit. 
For  the  various  test  conditions  for  establishing  the 
failure  transient,  the  time  delay  period  varied  from 
.06  to  2.1  seconds. 


The  slowover  transient  test  results  for  the  main 
ram  demonstrated  that  the  main  ram  moved  .039  inches 
from  null  before  the  input  failure  was  detected.  Upon 
detection,  the  actuator  returned  to  null  with  a minor 
deviation  lasting  for  .025  seconds  immediately  after  the 
failure  detection.  The  amplitude  of  the  failure  tran- 
sients due  to  a loss  of  input  were  simply  the  loss  of 
amplitude  between  the  time  of  failure  and  the  time  of 
failure  transfer. 


Hardover  failure  transient  tests  for  the  main  ram 
yielded  results  which  are  considered  invalid.  The  mech- 
anization should  limit  the  transient  to  less  than  .200 
inches  actuator  deflection  even  without  any  failure 
detection.  The  transient  with  failure  logic  which 
transfers  the  failed  input  out  with  minimum  delay 
would  reduce  the  transient  below  the  .200  inch  ampli- 
tude deflection.  Hydraulic  supply  failures  produced 
essentially  no  transients.  The  output  of  the  actuator 
did  not  change  for  single  hydraulic  failures. 
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Secondary  Ram  Tests 


The  performance  testing  of  the  secondary  ram  (control 
valve)  with  the  main  ram  disengaged  showed  that  the  nomi- 
nal performance  of  the  mechanization  was  comparable  to 
an  electrohydraulic  servovalve.  The  threshold  measurements 
for  the  secondary  ram  gave  values  typical  of  an  aerospace 
servovalve.  The  frequency  response  of  the  secondary  ram 
was  flat  to  approximately  38  Hz.  The  90°  phase  lag  fre- 
quency occurred  at  approximately  25  Hz.  The  hysteresis 
measurements  for  the  secondary  ram  indicated  that  the 
hysteresis  was  2 to  3 times  that  of  a typical  aerospace 
servovalve.  The  harmonic  distortion  for  the  5 and  10 
Hz  input  frequencies  gave  secondary  ram  distortion  figures 
of  less  than  4%. 


The  change  in  performance  of  the  secondary  ram  with 
failures  was  noticeable.  The  test  procedure  used  for 
evaluating  the  effect  of  two  electrical  failures  elimi- 
nated the  gain  changing  of  the  failure  logic,  so  that 
the  failure  effects  were  indicative  of  the  secondary 
ram  mechanization  without  gain  compensation.  The  static 
threshold  increased  from  .327o  to  .867,  for  loss  of  two 
electrical  channels.  The  dynamic  threshold  increased 
from  .687o  to  1.187.  for  the  same  failure  condition.  A 
lesser  threshold  increase  occurred  with  loss  of  one  hy- 
draulic supply.  The  frequency  response  of  the  secondary 
ram  changed  less  than  227.  for  the  failure  conditions. 

With  gain  changing,  the  threshold  would  not  have  increased 
nearly  as  much  with  loss  of  two  electrical  channels. 
Harmonic  distortion  increased  slightly  with  the  failure 
conditions,  but  still  remained  below  47,.  The  hysteresis 
measurements  for  the  secondary  ram  motion  showed  an  in- 
crease to  107,  for  the  loss  of  two  electrical  channels. 

This  value  would  not  have  been  effected  by  use  of  the 
gain  changer.  The  saturation  velocity  of  the  secondary 
ram  remained  essentially  unchanged  with  failure  condi- 
tions. 


In  general,  the  failure  effects  on  the  secondary 
ram  performance  were  minor.  The  magnitude  of  the 
changes  that  occurred  would  not  have  significant  im- 
pact on  the  performance  of  the  actuator  used  with  the 
secondary  ram. 

The  secondary  ram  failure  transients  for  input 
loss  reflected  the  results  observed  in  measuring  the 
main  ram  transients.  As  with  the  main  ram  motion,  the 
transient  that  does  occur  is  due  to  a loss  of  response 
amplitude  during  the  time  delay  period  between  the  loss 
of  input  and  failure  transfer.  After  loss  of  two  Inputs, 
the  secondary  ram  showed  some  waveform  distortion  resem- 
bling amplitude  saturation  in  one  direction  of  motion. 

The  electrical  hardover  input  transients  caused  the 
anticipated  result  in  the  secondary  ram  motion.  Upon  a 
hardover  input  into  one  channel,  the  secondary  ram  moved 
to  a position  corresponding  to  50%  of  the  stroke  in  one 
direction  and  stayed  there  during  the  time  delay  (.065 
to  .09  seconds)  between  failure  and  failure  transfer. 


4.2.3 


Failure  Logic  Characterii 


The  failure  logic  used  with  the  actuator  exhibited 
a detection  level  dependency  on  frequency  which  limited 
the  ability  of  the  logic  to  detect  failures  of  an  oscil- 
latory nature.  Normally,  the  rolloff  of  the  detection 
sensitivity  would  be  designed  to  occur  at  a frequency 
above  where  the  actuator  response  rolls  off.  The  static 
trip  level  measured  at  approximately  60%  of  the  input 
voltage  for  maximum  control  valve  stroke.  The  time  de- 
lay characteristics  before  failure  transfer  varied  with 
the  amplitude  of  the  error  signal  created  by  the  input 
failure. 
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The  failure  logic  voting  method  for  input  and  servo- 
amplifier  failures  compared  all  other  channels  to  one 
channel.  This  did  allow  detection  of  simultaneous  input 
failures,  but  also  allowed  a failure  of  the  reference 
channel  to  fail  all  other  channels.  The  logic  did  demon- 
strate that  nominal  characteristics  of  a voting  mechaniza- 
tion applied  to  the  actuator  mechanization.  In  an  actual 
flight  application,  the  logic  would  have  to  be  converted 
to  a true  voting  configuration  in  order  to  eliminate  the 
single  point  total  failure  characteristic. 


4.2.4  Comments  and  Recommendations 


As  stated  previously,  the  nominal  mechanization  met 
the  intended  redundancy  operating  characteristics.  There 
was  no  attempt  in  this  evaluation  to  estimate  the  relia- 
bility of  the  mechanization  or  conduct  a failure  mode 
analysis.  Since  the  electronics  used  with  the  actuator  are 
an  inseparable  part  of  the  overall  actuation  mechanization, 
the  techniques  used  in  mechanizing  the  electronics  are 
critical  to  the  overall  success  of  the  concept.  In  order 
to  evaluate  the  potential  of  the  overall  mechanization 
in  terms  of  providing  a given  reliability  improvement, 
the  electronics  would  have  to  be  conceived  and  implemented 
with  the  same  concern  as  that  applied  to  the  electrohy- 
draulic  actuator. 
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